Skip to content

Optimize build + CI workflow: per-arch parallel builds, Trivy gating, SBOM #37

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
KingPin merged 10 commits into from
May 18, 2026
+337 −252
Merged

Optimize build + CI workflow: per-arch parallel builds, Trivy gating, SBOM #37

Show file tree
Hide file tree
Changes from 8 commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
46719df
build: drop redundant json from install-php-extensions
KingPin May 18, 2026
5d7fb7c
build: use COPY --chmod and .gitattributes for line endings
KingPin May 18, 2026
548abc6
docs(dockerfile): explain Trixie t64 equivs workaround
KingPin May 18, 2026
d022e6a
ci: generate publish matrix from setup job
KingPin May 18, 2026
ed588a0
ci: attach SBOM to published images
KingPin May 18, 2026
9cdd02e
ci: inline bookworm-compat tags in build-push tags list
KingPin May 18, 2026
07dee3f
ci: run Trivy in build-and-test to gate publish
KingPin May 18, 2026
c13d148
ci: per-arch parallel builds with native arm64 runners
KingPin May 18, 2026
b1f62ab
fix(docker): apk upgrade in Alpine branches to clear Trivy CVE gate
KingPin May 18, 2026
1c82084
ci: inspect every published (registry, tag) after manifest merge
KingPin May 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions .gitattributes
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
* text=auto eol=lf

# Shell scripts and s6-overlay service files must always use LF line
# endings — the s6 supervision tree refuses to exec scripts with CRLF.
*.sh text eol=lf
extras/retry.sh text eol=lf
s6-overlay/** text eol=lf

# Dockerfiles
Dockerfile* text eol=lf
Loading
Loading