All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Unified
build.ymlCI workflow that checks daily for new upstream siegfried releases and builds/publishes automatically, withworkflow_dispatchkept for manual/backfill builds of a specific version.
- Rebuilt the Dockerfile as a multi-stage build: the final image now ships
only the compiled
sfbinary and its signature file instead of the full Go toolchain, shrinking it from ~529 MB to ~20 MB. latestis now only tagged when the version being built matches the current upstream-latest siegfried release, so a manual rebuild of an older version can no longer regress it.- Updated
README.mdrun examples to useghcr.io/keeps/siegfriedinstead of the unmaintained Docker Hub image reference.
latesttag onghcr.io/keeps/siegfried, which had been stuck on v1.10.2 since December 2023, retagged to the current release.- Container now runs
sfas PID 1 (viaexecin theCMD), so it receivesSIGTERMdirectly and shuts down promptly ondocker stopinstead of waiting out the kill timeout.
docker.yamlandmanual.ymlworkflows, replaced bybuild.yml.docker.yamltriggered on arepository_dispatchevent nothing sent, andmanual.ymlnever taggedlatest— together this is whylatesthad gone stale.