CaIon
a5e20269dd
security: harden Docker and release CI workflows
...
- Pin all GitHub Actions to commit SHA to prevent supply chain attacks
- Enable SLSA provenance attestation (mode=max) and SBOM generation
- Add cosign keyless signing for Docker images via GitHub OIDC
- Capture and output image digests to GitHub Job Summary
- Pin Dockerfile base images to digest (bun:1, golang:1.26.1-alpine, debian:bookworm-slim)
- Add SHA256 checksum generation for binary releases (Linux/macOS/Windows)
- Update actions/checkout v3->v4, actions/setup-go v3->v5 in release.yml
2026-03-24 23:56:15 +08:00
Seefs
2606d16e4e
Alpha CI ( #2011 )
2025-10-11 13:24:04 +08:00
CaIon
eaaee594ef
chore: add Docker Buildx setup to workflow
...
- Integrated Docker Buildx setup step in docker-image-alpha.yml to enhance multi-platform build capabilities.
2025-06-04 01:16:42 +08:00
CaIon
c8ab726655
chore: update docker image workflows
...
- Added support for multiple platforms (linux/amd64, linux/arm64) in docker-image-alpha.yml.
- Removed outdated docker-image-amd64.yml and docker-image-arm64.yml workflows.
- Deleted linux-release.yml, macos-release.yml, and windows-release.yml as part of workflow cleanup.
2025-06-04 01:12:49 +08:00
creamlike1024
0e642a58e0
update docker-image-alpha.yml
2025-06-03 11:10:09 +08:00
creamlike1024
a5de6f91d6
feat: alpha docker image
2025-06-03 11:07:26 +08:00
