Commit Graph

6 Commits

Author SHA1 Message Date
Trent Maetzold
f65449c585 Rework CI/CD into 3 pipelines: ci, deploy, scheduled-update
Split build.yaml into separate workflows for clearer separation of concerns:
- ci.yaml: PR builds push to staging tag (:pr-N), runs Trivy scan
- deploy.yaml: on merge retags staging to :latest + :version, on direct push runs full pipeline
- scheduled-update.yaml: daily cron checks for new upstream releases

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-19 09:44:01 -05:00
Anton
5a8e960374 Use latest Trivy action 2026-03-11 20:15:25 +00:00
Anton
b3cca778fa Update Trivy action to 0.35.0 2026-03-11 20:14:05 +00:00
Anton
21ae9d5b7e Rewrite CI from scratch: clean build + scheduled update, remove deb workflow 2026-03-11 20:07:05 +00:00
Anton
ed4d5d491a Add workflow permissions for GHCR write and security-events 2026-03-11 19:06:37 +00:00
Anton
b8703845db Split into two workflows: build (push/PR/dispatch) and scheduled-update (daily version check) 2026-03-11 18:34:08 +00:00