Merge pull request #4 from acutedev/publish-docker-image

Add prebuilt Docker image publishing

Author: acutedev

.github/workflows/publish-image.yml

@@ -0,0 +1,65 @@
+name: Publish Docker image
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: Docker tag to publish
+        required: true
+        type: string
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  push-to-registry:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out the repo
+        uses: actions/checkout@v4
+
+      - name: Validate manual tag
+        if: github.event_name == 'workflow_dispatch'
+        env:
+          REQUESTED_TAG: ${{ inputs.tag }}
+        run: |
+          normalized_tag=$(printf '%s' "$REQUESTED_TAG" | tr '[:upper:]' '[:lower:]')
+
+          if [ "$normalized_tag" = "latest" ]; then
+            echo "Error: the tag 'latest' is reserved for stable releases and cannot be set manually."
+            exit 1
+          fi
+
+          if ! printf '%s' "$REQUESTED_TAG" | grep -Eq '^[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}$'; then
+            echo "Error: invalid Docker tag. Use 1-128 characters: letters, numbers, underscores, periods, or hyphens; the first character must be a letter, number, or underscore."
+            exit 1
+          fi
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ghcr.io/${{ github.repository }}
+          tags: |
+            type=raw,value=${{ github.event.release.tag_name }},enable=${{ github.event_name == 'release' }}
+            type=raw,value=latest,enable=${{ github.event_name == 'release' && !github.event.release.prerelease }}
+            type=raw,value=${{ inputs.tag }},enable=${{ github.event_name == 'workflow_dispatch' }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}

README.md

@@ -105,7 +105,22 @@ flowchart TB
 
 ## Docker Quick-Start
 
-Docker runs the full workflow without installing Python locally. No pre-built image is published; build from source.
+Docker runs the full workflow without installing Python locally. Versioned prebuilt images will be published to GitHub Container Registry when a GitHub Release is published, and `latest` will be published for stable releases. Until the first release is available, build the image locally using the commands below.
+
+### Prebuilt image after the first release
+
+After the first stable GitHub Release is published, the image will be available at:
+
+```bash
+docker pull ghcr.io/acutedev/bug-triage-workflow-python:latest
+docker run --rm ghcr.io/acutedev/bug-triage-workflow-python:latest --help
+```
+
+Versioned releases will also be available by tag, for example:
+
+```bash
+docker pull ghcr.io/acutedev/bug-triage-workflow-python:v1.0.0
+```
 
 ```bash
 cp .env.example .env
@@ -477,6 +492,7 @@ CLI exit codes implemented in `src/main.py`:
 ├── .env.example
 ├── .github/
 │   └── workflows/
+│       ├── publish-image.yml
 │       └── tests.yml
 ├── .gitignore
 ├── README.md