## Summary - Replace git-tag-triggered container builds with path-based triggers on main and workflow_dispatch - Image tags now encode upstream app version + commit SHA (`vX.Y.Z-<sha>`) for full traceability - Replace `container-tag-and-release` task with `container-build-and-release` (dispatches workflows via Forgejo API) - Update dagger `publish()` to accept `commit_sha` parameter - Update all docs and references to the new workflow ## Deployment and Testing - [ ] Merge to main - [ ] `mise run container-build-and-release <name>` for each container to populate new-format tags - [ ] Verify tags in registry via `mise run container-list` - [ ] Existing images untouched — old tags remain available Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/232 |
||
|---|---|---|
| .. | ||
| add-container-version-sync-check.md | ||
| add-dagger-nix-build.md | ||
| adopt-commit-based-container-tags.md | ||
| enforce-tag-immutability.md | ||
| fix-ntfy-nix-version.md | ||
| harden-zot-registry.md | ||
| pin-container-versions.md | ||
| register-zot-oidc-client.md | ||
| wire-ci-registry-auth.md | ||