add workflow

[LoseSynchronization]

Summary by CodeRabbit

• Chores
  • Automated Docker image publication to container registry with multi-architecture support and cryptographic signing.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: d9301e12-379b-4626-bd72-f7b2b5b4c6ca

📥 Commits

Reviewing files that changed from the base of the PR and between fddf54c and 4e70865.

📒 Files selected for processing (1)

• .github/workflows/docker-build-ghcr.yml

---

Walkthrough

This pull request introduces a new GitHub Actions workflow that automates multi-architecture Docker image publication to GHCR. The workflow builds per-architecture images using Docker Buildx, signs them with cosign, and creates multi-arch manifests, triggered by Git tags or manual dispatch.

Changes

GHCR Multi-architecture Docker Publishing

Layer / File(s)	Summary
Workflow triggers and configuration .github/workflows/docker-build-ghcr.yml	Workflow name and event triggers: runs on pushed Git tags (excluding nightly*) and supports manual execution with a required tag input parameter.
Per-architecture image build and signing .github/workflows/docker-build-ghcr.yml	Matrix-based build_single_arch job builds per-architecture images (amd64, arm64) with Buildx, manages GHCR authentication and image naming, resolves and normalizes version tags, applies Docker metadata labels, configures caching and provenance, and signs each pushed image digest with cosign. Per-arch image digests and summaries are written to GitHub Step Summary.
Multi-architecture manifest creation .github/workflows/docker-build-ghcr.yml	create_manifests job depends on successful per-arch builds, authenticates to GHCR, combines amd64 and arm64 image tags into multi-arch manifests for both the resolved version tag and latest, and writes final manifest inspection output to GitHub Step Summary.

Estimated Code Review Effort

🎯 4 (Complex) | ⏱️ ~45 minutes

Possibly Related PRs

• QuantumNous/new-api#2022: Modifies GHCR-related GitHub Actions workflows with image/manifest build-push and signing steps.
• QuantumNous/new-api#2011: Adds GitHub Actions workflows for multi-architecture Docker image builds and GHCR-focused tagging with follow-on multi-arch manifest creation.
• QuantumNous/new-api#2008: Introduces matrix-based per-architecture Docker builds with GHCR authentication and multi-arch manifest creation using imagetools.

Poem

🐰 A rabbit's ode to containerized might:
Tag the code, and watch the build take flight,
Through amd64, arm64 we dance,
Cosign seals each image in advance,
Manifests merge where all architectures stand,
GHCR receives, a multi-arch band! 🐳

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}