mirror of
https://github.com/j178/prek.git
synced 2026-04-25 02:11:36 +02:00
bb412c0808
Republish 0.3.7 due to a publish process failure.
52 lines
1.4 KiB
Markdown
52 lines
1.4 KiB
Markdown
# Integrations
|
|
|
|
This page documents common ways to integrate prek into CI and container workflows.
|
|
|
|
## Docker
|
|
|
|
prek is published as a distroless container image at:
|
|
|
|
- `ghcr.io/j178/prek`
|
|
|
|
The image is based on `scratch` (no shell, no package manager). It contains the prek binary at `/prek`.
|
|
|
|
A common pattern is to copy the binary into your own image:
|
|
|
|
```dockerfile
|
|
FROM debian:bookworm-slim
|
|
COPY --from=ghcr.io/j178/prek:v0.3.8 /prek /usr/local/bin/prek
|
|
```
|
|
|
|
If you prefer, you can also run the distroless image directly:
|
|
|
|
```bash
|
|
docker run --rm ghcr.io/j178/prek:v0.3.8 --version
|
|
```
|
|
|
|
### Verifying Images
|
|
|
|
Docker images are signed with
|
|
[GitHub Attestations](https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations)
|
|
to verify they were built by official prek workflows. Verify using the
|
|
[GitHub CLI](https://cli.github.com/):
|
|
|
|
```console
|
|
$ gh attestation verify --owner j178 oci://ghcr.io/j178/prek:latest
|
|
Loaded digest sha256:xxxx... for oci://ghcr.io/j178/prek:latest
|
|
Loaded 1 attestation from GitHub API
|
|
✓ Verification succeeded!
|
|
|
|
- Attestation #1
|
|
- Build repo:..... j178/prek
|
|
- Build workflow:. .github/workflows/build-docker.yml@refs/tags/vX.Y.Z
|
|
```
|
|
|
|
!!! tip
|
|
|
|
Use a specific version tag (e.g., `ghcr.io/j178/prek:v0.3.8`) or image
|
|
digest rather than `latest` for verification.
|
|
|
|
## GitHub Actions
|
|
|
|
--8<-- "README.md:github-actions"
|