lerkolabs/uptop
1
1
Fork 0
Code Issues 17 Pull Requests 1 Actions Packages Projects 2 Releases 1 Wiki Activity

refactor(ci): split release pipeline, add packaging and scanning #45

Merged
lerko merged 3 commits from refactor/split-release-workflows into main 2026-06-02 13:24:38 +00:00
Conversation 0 Commits 3 Files Changed 6
+168 -62

3 Commits

Author SHA1 Message Date
lerko 9b5cc37ad4 build(docker): pin base images by digest
CI / test (pull_request) Successful in 2m20s
Details
CI / lint (pull_request) Successful in 41s
Details
CI / vulncheck (pull_request) Successful in 41s
Details 
Prevents silently pulling a compromised or broken upstream image.
Digests must be updated manually when bumping Alpine/Go versions.
 2026-06-01 21:38:31 -04:00
lerko 3a169b2bcd ci(docker): add Grype CVE scanning after image push 
Scans published image for Alpine and dependency CVEs.
Fails on critical severity, reports all others in table output.
 2026-06-01 21:32:20 -04:00
lerko 50eb43971c refactor(ci): split release pipeline, add nfpm/homebrew/git-cliff 
Split monolithic release.yml into independent workflows:
- release-binaries.yml: tag-triggered, GoReleaser + git-cliff notes
- release-docker.yml: tag-triggered + manual dispatch, SHA tags

Add DEB/RPM packaging via nfpm in GoReleaser. Add Homebrew cask
config (skip_upload until macOS builds exist). Replace GoReleaser
built-in changelog with git-cliff for structured release notes.
 2026-06-01 21:14:54 -04:00