Bryan Helmkamp d52e6829c2 feat(docker): publish multi-arch server image to GHCR ... Replace the docker/Dockerfile-based api+web compose setup with a single root Dockerfile that runs the fabro server with the embedded web UI on port 80, persists state under /storage, and drops to a non-root fabro user with CAP_NET_BIND_SERVICE. The release workflow stages the prebuilt Linux binaries from the compile job into a buildx context and publishes multi-arch images to ghcr.io/fabro-sh/fabro as :<version> (always), :latest (stable tags only), and :nightly (nightly tags only). Also address zizmor findings in nightly.yml (pinned create-github-app-token, persist-credentials: false with explicit remote URL setup) and release.yml (no-cache on tag-triggered setup-bun to close the cache-poisoning path). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-04-17 19:39:10 -04:00
..
workflows	feat(docker): publish multi-arch server image to GHCR	2026-04-17 19:39:10 -04:00
zizmor.yml	Add GitHub Actions CI workflows for Rust and TypeScript	2026-03-04 00:35:04 -05:00