ci: publish from a GitHub Actions environment and to the arc53 namespace

The build and manifest jobs of both image workflows declare
environment: docker-hub, so the registry credentials can be scoped to it and
protection rules applied in the repository settings (the environment is
created on first use). The image namespace is the public arc53 the compose
files pull from, not the login secret, which now only authenticates.
This commit is contained in:
Alex committed 2026-09-06 23:01:43 +01:00
1 parent d948f11d06
commit 6ece75a152
2 files changed
+28 -8

No files matched your search

+14 -4
View File
@@ -7,9 +7,14 @@ on:
jobs:
build:
if: github.repository == 'arc53/DocsGPT'
# Publishing jobs run in a GitHub Actions environment so the registry
# credentials can be scoped to it and protection rules (required reviewers,
# branch restrictions) applied in the repository settings.
environment: docker-hub
env:
# Docker Hub namespace; a secret is only referenced from env blocks.
DOCKERHUB_NAMESPACE: ${{ secrets.DOCKER_USERNAME }}
# Public namespace the compose files pull from; the login secret only
# authenticates the push.
DOCKERHUB_NAMESPACE: arc53
strategy:
matrix:
platform: [linux/amd64, linux/arm64]
@@ -76,9 +81,14 @@ jobs:
manifest:
if: github.repository == 'arc53/DocsGPT'
# Publishing jobs run in a GitHub Actions environment so the registry
# credentials can be scoped to it and protection rules (required reviewers,
# branch restrictions) applied in the repository settings.
environment: docker-hub
env:
# Docker Hub namespace; a secret is only referenced from env blocks.
DOCKERHUB_NAMESPACE: ${{ secrets.DOCKER_USERNAME }}
# Public namespace the compose files pull from; the login secret only
# authenticates the push.
DOCKERHUB_NAMESPACE: arc53
needs: build
strategy:
matrix:
+14 -4
View File
@@ -9,9 +9,14 @@ on:
jobs:
build:
if: github.repository == 'arc53/DocsGPT'
# Publishing jobs run in a GitHub Actions environment so the registry
# credentials can be scoped to it and protection rules (required reviewers,
# branch restrictions) applied in the repository settings.
environment: docker-hub
env:
# Docker Hub namespace; a secret is only referenced from env blocks.
DOCKERHUB_NAMESPACE: ${{ secrets.DOCKER_USERNAME }}
# Public namespace the compose files pull from; the login secret only
# authenticates the push.
DOCKERHUB_NAMESPACE: arc53
strategy:
matrix:
platform: [linux/amd64, linux/arm64]
@@ -78,9 +83,14 @@ jobs:
manifest:
if: github.repository == 'arc53/DocsGPT'
# Publishing jobs run in a GitHub Actions environment so the registry
# credentials can be scoped to it and protection rules (required reviewers,
# branch restrictions) applied in the repository settings.
environment: docker-hub
env:
# Docker Hub namespace; a secret is only referenced from env blocks.
DOCKERHUB_NAMESPACE: ${{ secrets.DOCKER_USERNAME }}
# Public namespace the compose files pull from; the login secret only
# authenticates the push.
DOCKERHUB_NAMESPACE: arc53
needs: build
strategy:
matrix: