blumeops/docs/how-to/zot
Erich Blume ffa8727660 Adopt commit-based container tags (#232)
## Summary
- Replace git-tag-triggered container builds with path-based triggers on main and workflow_dispatch
- Image tags now encode upstream app version + commit SHA (`vX.Y.Z-<sha>`) for full traceability
- Replace `container-tag-and-release` task with `container-build-and-release` (dispatches workflows via Forgejo API)
- Update dagger `publish()` to accept `commit_sha` parameter
- Update all docs and references to the new workflow

## Deployment and Testing
- [ ] Merge to main
- [ ] `mise run container-build-and-release <name>` for each container to populate new-format tags
- [ ] Verify tags in registry via `mise run container-list`
- [ ] Existing images untouched — old tags remain available

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/232
2026-02-20 22:56:20 -08:00
..
add-container-version-sync-check.md Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
add-dagger-nix-build.md Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
adopt-commit-based-container-tags.md Adopt commit-based container tags (#232) 2026-02-20 22:56:20 -08:00
enforce-tag-immutability.md Create C2 Mikado cards for harden-zot-registry (#229) 2026-02-20 17:56:25 -08:00
fix-ntfy-nix-version.md Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
harden-zot-registry.md Add commit-based container tagging prereq to harden-zot-registry chain (#230) 2026-02-20 18:26:27 -08:00
pin-container-versions.md Harden zot registry, pt 1 (#231) 2026-02-20 22:50:01 -08:00
register-zot-oidc-client.md Create C2 Mikado cards for harden-zot-registry (#229) 2026-02-20 17:56:25 -08:00
wire-ci-registry-auth.md Create C2 Mikado cards for harden-zot-registry (#229) 2026-02-20 17:56:25 -08:00