4 Commits (37f449a69fd8b38309ecc794341cdee9a7799a2c)

Author	SHA1	Message	Date
Sebastian Noe	a6fada7a99	fix(ci): optimize docker build — single platform, remove QEMU (#8) ... - Remove QEMU setup (no ARM cross-compilation needed) - Build only linux/amd64 (target deployment arch) - Reduces build time from 35+ min to ~10-15 min - Reduce timeout back to 30 min Co-authored-by: Sebastian Noe <sebastian.schneider@boxine.de>	1 month ago
Sebastian Noe	03aeee3df2	fix(ci): increase docker build timeout to 60 minutes (#7) ... Multi-platform builds with QEMU ARM emulation exceed 30 minutes for this multi-stage Dockerfile (Ruby gems + Node compilation). Co-authored-by: Sebastian Noe <sebastian.schneider@boxine.de>	1 month ago
Sebastian Noe	12fd4d1194	fix(ci): correct SHA pins for cosign-installer and sbom-action (#6) ... - cosign-installer: use v3.9.2 (d58896d6a186...) - sbom-action: use v0.18.0 (f325610c9f50...) Co-authored-by: Sebastian Noe <sebastian.schneider@boxine.de>	1 month ago
Sebastian Noe	1300f93d16	ci: replace Docker Hub workflow with hardened GHCR pipeline (#5) ... - Add docker-publish.yml: builds, signs (cosign), and attests images on GHCR - All actions SHA-pinned for supply chain protection - Minimal GITHUB_TOKEN permissions (deny-all default) - SBOM generation and SLSA provenance attestation - Multi-platform builds (amd64 + arm64) with GHA caching - Triggers only on *.*.*-fork* tags (pre-releases skip 'latest') - Add dependabot.yml for automated action/gem/npm updates - Remove old docker.yml (pushed to upstream's Docker Hub registry) Co-authored-by: Sebastian Noe <sebastian.schneider@boxine.de>	1 month ago