Skip to content

ci: simplify workflows for enopax fork#2

Merged
felixboehm merged 1 commit into
mainfrom
ci/simplify-release-workflows
Mar 19, 2026
Merged

ci: simplify workflows for enopax fork#2
felixboehm merged 1 commit into
mainfrom
ci/simplify-release-workflows

Conversation

@felixboehm

Copy link
Copy Markdown

Summary

  • Fix CI trigger from master to main
  • Remove upstream service containers (postgres, mysql, etcd, keystone, vault, openbao) and kind cluster — only file storage is used
  • Switch from Docker Hub + GHCR to GHCR only (ghcr.io/enopax/dex)
  • Reduce build platforms to amd64 + arm64
  • Remove cosign signing, Trivy scanning, SBOM generation, and build provenance attestation
  • Remove upstream-only workflows (PR label checks, OpenSSF scorecard, Trivy DB cache)
  • Add GitHub Release creation with auto-generated release notes on version tags

Release workflow

Push a version tag to trigger a release:

git tag v2.46.0
git push origin v2.46.0

This will build + push container images to GHCR and create a GitHub Release.

Test plan

  • Push to branch triggers CI (test + lint)
  • Version tag triggers release workflow
  • Container images published to ghcr.io/enopax/dex
  • GitHub Release created with release notes

- Fix CI trigger: master → main
- Remove upstream service containers (postgres, mysql, etcd, keystone, vault, openbao)
- Remove kind cluster and Docker Hub — GHCR only
- Reduce platforms to amd64 + arm64
- Remove cosign, Trivy, SBOM, build provenance steps
- Remove upstream-only workflows (checks, scorecard, trivydb-cache)
- Add GitHub Release creation with auto-generated notes on version tags
@felixboehm felixboehm merged commit 75a1d1b into main Mar 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant