From: Mustafa Abdul-Kader <mustafa@muszr.me>
Date: Sat, 17 Oct 2026 18:53:18 +0000 (-0500)
Subject: CI: .ci.yaml names the check and image targets
X-Git-Url: http://git.muszr.me/?a=commitdiff_plain;ds=inline;p=geoauth.git

CI: .ci.yaml names the check and image targets
---

diff --git a/.ci.yaml b/.ci.yaml
new file mode 100644
index 0000000..da2f069
--- /dev/null
+++ b/.ci.yaml
@@ -0,0 +1,4 @@
+# What CI runs for this repository. Targets are stages of ./Dockerfile.
+checks: [checks]                         # every push: go vet and go test
+images:                                  # main and release tags (vX.Y.Z): built and pushed as registry.home.muszr.me/<name>:<tag>
+  - {target: geoauth, name: geoauth}
diff --git a/Dockerfile b/Dockerfile
index 894d637..3f5b091 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:1
 #
-# geoauth: the country forward-auth for the public ingress. Built by the Tekton pipeline `geoauth` when a tag vX.Y.Z is pushed
-# to this repository; the image is registry.home.muszr.me/geoauth:vX.Y.Z.
+# geoauth: the country forward-auth for the public ingress. CI builds the targets that .ci.yaml names; a tag vX.Y.Z pushed to this
+# repository gives the image registry.home.muszr.me/geoauth:vX.Y.Z.
 #
 #   checks   go vet and go test (fails the build)
 #   geoauth  the runtime image: a static binary and the CA bundle in scratch, no shell, no package manager, uid/gid 65532
diff --git a/README.md b/README.md
index 3722d93..729756a 100644
--- a/README.md
+++ b/README.md
@@ -33,6 +33,11 @@ docker build --target checks .            # go vet and go test
 docker build --target geoauth -t geoauth .
 ```
 
+## CI
+
+`.ci.yaml` names the Dockerfile targets that CI runs: `checks` on every push, and the `geoauth` image on `main` and on release
+tags (`git tag vX.Y.Z && git push origin vX.Y.Z`).
+
 ## Traefik
 
 ```yaml