The publish workflow only fired on push to main and on v* tags, which meant the Dockerfile got no CI coverage at all until after it landed — and the workflow could not be observed working before merging it. PRs now run the same build with push disabled, amd64 only (the emulated arm64 leg is the slow part and is not needed to prove the build works). Login, SBOM, provenance and attestation are skipped when not publishing. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
35df4dd687
·
2026-09-02 00:07:09 -05:00
History