Migrate Docker image hosting to GitHub Container Registry

- Updated GitHub Actions workflow to use ghcr.io/openbudget/budgetkey-mcp
- Removed dependency on Docker Hub secrets (DOCKER_USERNAME, DOCKER_PASSWORD)
- Using GITHUB_TOKEN for authentication with GitHub Container Registry
- Updated ci.sh script to use new image path
- Updated README with new Docker image location and GHCR link
- Added permissions block to workflow for packages:write
- Simplified deployment using docker/login-action
- Image now hosted under OpenBudget organization on GitHub Packages

Author: akariv

.github/workflows/deploy.yml

@@ -9,28 +9,51 @@ jobs:
   build:
 
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
 
     steps:
     - uses: actions/checkout@v3
+
     - name: Set up Python 3.11
       uses: actions/setup-python@v3
       with:
         python-version: "3.11"
-    - name: Build
+
+    - name: Log in to GitHub Container Registry
+      uses: docker/login-action@v2
+      with:
+        registry: ghcr.io
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Build Docker image
       env:
-        TRAVIS_CI_OPERATOR: "1"
-        DOCKER_USER: ${{ secrets.DOCKER_USERNAME }}
-        DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
-        GITHUB_TOKEN: ${{ secrets.K8S_GITHUB_TOKEN }}
+        DOCKER_IMAGE: ghcr.io/openbudget/budgetkey-mcp
+        GITHUB_SHA: ${{ github.sha }}
       run: |
-        ./ci.sh install
-        ./ci.sh script
-    - name: Deploy
+        docker build -t ${DOCKER_IMAGE}:latest -t ${DOCKER_IMAGE}:${GITHUB_SHA} .
+
+    - name: Push Docker image
+      env:
+        DOCKER_IMAGE: ghcr.io/openbudget/budgetkey-mcp
+        GITHUB_SHA: ${{ github.sha }}
+      run: |
+        docker push ${DOCKER_IMAGE}:latest
+        docker push ${DOCKER_IMAGE}:${GITHUB_SHA}
+
+    - name: Update Kubernetes deployment
       env:
-        TRAVIS_CI_OPERATOR: "1"
-        DOCKER_USER: ${{ secrets.DOCKER_USERNAME }}
-        DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
         GITHUB_TOKEN: ${{ secrets.K8S_GITHUB_TOKEN }}
+        GITHUB_SHA: ${{ github.sha }}
+        DOCKER_IMAGE: ghcr.io/openbudget/budgetkey-mcp
       run: |
-        ./ci.sh deploy
-        ./ci.sh bump
+        docker run -e CLONE_PARAMS="--branch master https://github.com/OpenBudget/budgetkey-k8s.git" \
+                   -e YAML_UPDATE_JSON='{"mcp":{"image":"'"${DOCKER_IMAGE}:${GITHUB_SHA}"'"}}' \
+                   -e YAML_UPDATE_FILE="values.auto-updated.yaml" \
+                   -e GIT_USER_EMAIL="budgetkey-deployer@null.void" \
+                   -e GIT_USER_NAME="budgetkey-deployer" \
+                   -e GIT_COMMIT_MESSAGE="automatic update of budgetkey-mcp" \
+                   -e PUSH_PARAMS="https://${GITHUB_TOKEN}@github.com/OpenBudget/budgetkey-k8s.git master" \
+                   orihoch/github_yaml_updater

README.md

@@ -81,11 +81,13 @@ Restart Claude Desktop and you're ready to query Israeli budget data!
 ### Using Docker
 
 ```bash
-docker run -p 8000:8000 budgetkey/budgetkey-mcp:latest
+docker run -p 8000:8000 ghcr.io/openbudget/budgetkey-mcp:latest
 ```
 
 The server will be available at `http://localhost:8000/mcp`
 
+**Note**: The Docker image is hosted on GitHub Container Registry under the OpenBudget organization.
+
 ### From Source
 
 ```bash
@@ -152,9 +154,11 @@ budgetkey-mcp/
 ### Building
 
 ```bash
-docker build -t budgetkey-mcp .
+docker build -t ghcr.io/openbudget/budgetkey-mcp:latest .
 ```
 
+**CI/CD**: The GitHub Actions workflow automatically builds and publishes Docker images to GitHub Container Registry on every push to `main`.
+
 ### Testing
 
 ```bash
@@ -179,6 +183,7 @@ This project follows the same license as the BudgetKey project.
 ## Links
 
 - [Integration Guide](./INTEGRATION-GUIDE.md) - Detailed setup for Claude Desktop, VS Code, Cursor, and Python
+- [Docker Image](https://github.com/OpenBudget/budgetkey-mcp/pkgs/container/budgetkey-mcp) - GitHub Container Registry
 - [BudgetKey Website](https://next.obudget.org)
 - [BudgetKey API Documentation](https://next.obudget.org/api/docs)
 - [MCP Protocol](https://modelcontextprotocol.io/)

ci.sh

@@ -8,7 +8,7 @@ DEPLOY_GIT_USER=budgetkey-deployer
 
 DEPLOY_COMMIT_MESSAGE="automatic update of budgetkey-mcp"
 DEPLOY_VALUES_CHART_NAME=mcp
-DOCKER_IMAGE=budgetkey/budgetkey-mcp
+DOCKER_IMAGE=ghcr.io/openbudget/budgetkey-mcp
 
 
 if [ "${1}" == "install" ]; then