mirror of
https://github.com/fabro-sh/fabro.git
synced 2026-08-28 05:27:41 +00:00
d52e6829c2
Replace the docker/Dockerfile-based api+web compose setup with a single root Dockerfile that runs the fabro server with the embedded web UI on port 80, persists state under /storage, and drops to a non-root fabro user with CAP_NET_BIND_SERVICE. The release workflow stages the prebuilt Linux binaries from the compile job into a buildx context and publishes multi-arch images to ghcr.io/fabro-sh/fabro as :<version> (always), :latest (stable tags only), and :nightly (nightly tags only). Also address zizmor findings in nightly.yml (pinned create-github-app-token, persist-credentials: false with explicit remote URL setup) and release.yml (no-cache on tag-triggered setup-bun to close the cache-poisoning path). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| docker-compose.yaml | ||
| Dockerfile.agent | ||
| entrypoint.sh | ||
| settings.toml | ||