Conform to latest vgi-lint: drop rule waivers, fix VGI311/VGI807 for … #3
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Copyright 2026 Query Farm LLC - https://query.farm | |
| # | |
| # Build + publish the multi-arch vgi-etf-spdr image to ghcr.io. The heavy lifting | |
| # (multi-arch build -> /health smoke -> push-by-digest -> manifest -> cosign-sign) | |
| # lives in the shared reusable workflow Query-farm/vgi-actions/docker-publish.yml; | |
| # this file gates on the repo's own CI and supplies the worker-specific inputs. | |
| # | |
| # Tag-driven: vX.Y.Z -> :X.Y.Z / :X.Y / :latest; push to main -> :edge. | |
| name: Publish image to ghcr.io | |
| on: | |
| push: | |
| branches: [main] | |
| tags: ['v*.*.*'] | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: docker-${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| # Gate every image on the full unit + haybarn E2E + vgi-lint suite. | |
| ci: | |
| uses: ./.github/workflows/ci.yml | |
| publish: | |
| needs: [ci] | |
| permissions: | |
| contents: read | |
| packages: write | |
| id-token: write | |
| attestations: write | |
| uses: Query-farm/vgi-actions/.github/workflows/docker-publish.yml@v1 | |
| secrets: inherit | |
| with: | |
| image_name: vgi-etf-spdr | |
| health_port: "8000" | |
| version_check_cmd: "ci/check-version.sh" |