From ff4409a0939eac9d2d06bcec00aed53e235e8800 Mon Sep 17 00:00:00 2001 From: Simon Chrzanowski Date: Wed, 11 Nov 2026 16:36:44 +0100 Subject: [PATCH] Publish an image for each push to main Images were only built for release tags, so trying a fix between releases meant building the image yourself, and the main tag on ghcr.io was a months-old manual build. publish.yml now also runs on pushes to main that change more than Markdown or docs/, tagged main and sha-. Releases, latest and the Helm chart are unchanged. --- .github/workflows/publish.yml | 15 +++++++++++++++ README.md | 2 ++ 2 files changed, 17 insertions(+) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index e325a8a2..27ce8aa3 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -3,6 +3,14 @@ name: Publish Docker image on: workflow_dispatch: push: + # Each merge to main is published as main and sha-, so a fix + # can be tried before the next release. Docs-only changes are skipped; + # path filters don't apply to tag pushes. + branches: + - main + paths-ignore: + - "**.md" + - "docs/**" tags: - "v*" # A draft release made by monthly-release.yml is published by hand. Releases @@ -49,6 +57,13 @@ jobs: uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 with: images: ghcr.io/${{ github.repository }} + # The action's default tags, plus sha- for main. + tags: | + type=schedule + type=ref,event=branch + type=ref,event=tag + type=ref,event=pr + type=sha,enable={{is_default_branch}} - uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 diff --git a/README.md b/README.md index 7ba3cb21..cf461d28 100644 --- a/README.md +++ b/README.md @@ -1780,6 +1780,8 @@ Images for linux/amd64 and linux/arm64 are published to `ghcr.io/git-pkgs/proxy` docker run -p 8080:8080 -v proxy-data:/data ghcr.io/git-pkgs/proxy:latest ``` +Each merge to `main` is also published, tagged `main` and `sha-`, to try a change before the next release. They are not releases: `latest` only moves with a release. + To build the image from the repo instead: ```bash