sync

.github/workflows/container-build.yml

@@ -1,29 +1,36 @@
 name: Build and Push Docker Image
 
 on:
-  workflow_dispatch:
+workflow_dispatch:
-  push:
+push:
-    branches:
+branches:
-      - main
+- main
+paths:
+- 'app.py'
+- 'dockerfile'
+- 'requirements.txt'
+- 'docker-compose.yml'
 
 jobs:
-  build-and-push:
+build-and-push:
-    runs-on: ubuntu-latest
+runs-on: ubuntu-latest
-    permissions:
+permissions:
-      contents: read
+contents: read
-      packages: write
+packages: write
 
-    steps:
+steps:
   - name: Checkout repository
     uses: actions/checkout@v4
 
   - name: Set registry URL
     id: registry
     run: |
+      # The registry URL for Gitea is the server URL without the scheme (https://)
       if [ "${{ github.server_url }}" = "https://github.com" ]; then
         echo "url=ghcr.io" >> $GITHUB_OUTPUT
       else
-            echo "url=${{ github.server_url }}" | sed 's|https://||' >> $GITHUB_OUTPUT
+        # Remove 'https://' prefix for the Docker registry hostname
+        echo "url=$(echo ${{ github.server_url }} | sed 's|^https://||')" >> $GITHUB_OUTPUT
       fi
 
   - name: Set up QEMU
@@ -34,6 +41,7 @@ jobs:
     with:
       registry: ${{ steps.registry.outputs.url }}
       username: ${{ github.actor }}
+      # Use GITEA_TOKEN (or a generic token) for authentication
       password: ${{ secrets.PACKAGE_TOKEN || secrets.GITHUB_TOKEN }}
 
   - name: Set up Docker Buildx
@@ -50,3 +58,9 @@ jobs:
         ${{ steps.registry.outputs.url }}/${{ github.repository }}:${{ github.sha }}
       cache-from: type=gha
       cache-to: type=gha,mode=max
+      
+      # --- AUTOMATIC REPOSITORY LINKING ---
+      # This label adds an OCI annotation that Gitea uses to automatically
+      # link the package to the repository source code.
+      labels: |
+        org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}