ci: retarget container builds to ghcr

Author: boa-z

.github/workflows/docker-build.yml

@@ -62,7 +62,7 @@ jobs:
           file: Dockerfile.github
           platforms: ${{ inputs.platforms }}
           push: ${{ inputs.push == 'true' }}
-          tags: ghcr.io/${{ github.repository }}/vohive:dev
+          tags: ghcr.io/${{ github.repository }}:dev
           provenance: false
           sbom: false
           cache-from: type=gha

.github/workflows/docker-publish.yml

@@ -1,4 +1,4 @@
-name: Build and Push Docker Image
+name: Build and Push GHCR Image
 
 on:
   push:
@@ -12,11 +12,14 @@ on:
         default: "true"
 
 env:
-  DOCKER_IMAGE: ${{ secrets.DOCKERHUB_USERNAME }}/vohive
+  CONTAINER_IMAGE: ghcr.io/${{ github.repository }}
 
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -27,21 +30,24 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Login to DockerHub
+      - name: Login to GHCR
         if: github.event_name != 'pull_request'
         uses: docker/login-action@v3
         with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata (tags, labels)
         id: meta
         uses: docker/metadata-action@v5
         with:
-          images: ${{ env.DOCKER_IMAGE }}
+          images: ${{ env.CONTAINER_IMAGE }}
           tags: |
             # 总是打上 latest 标签
             type=raw,value=latest,enable=true
+            # 保留 Git tag 标签 (例如 v1.0.0)
+            type=ref,event=tag
             # 语义化精确版本标签 (例如 v1.0.0 会被转换为 1.0.0)
             type=semver,pattern={{version}}
 

DOCKERHUB.md

@@ -34,7 +34,7 @@ EOF
 ```yaml
 services:
   vohive:
-    image: iniwex/vohive:latest
+    image: ghcr.io/boa-z/vohive:latest
     container_name: vohive
     restart: unless-stopped
     ports:

docker-compose.hub.yml

@@ -1,10 +1,10 @@
-# Docker Compose 配置 - 使用 DockerHub 预构建镜像
-# 镜像地址: iniwex/vohive
+# Docker Compose 配置 - 使用 GHCR 预构建镜像
+# 镜像地址: ghcr.io/boa-z/vohive
 # 用法: docker-compose -f docker-compose.hub.yml up -d
 
 services:
   vohive:
-    image: iniwex/vohive:latest
+    image: ${VOHIVE_IMAGE:-ghcr.io/boa-z/vohive:latest}
     container_name: vohive
     restart: unless-stopped
     ports:

scripts/ci.sh

@@ -55,11 +55,11 @@ dependency_hygiene() {
 
 	forbidden_refs="$(
 		{
-			git grep -nE 'github[.]com/iniwex5|github[.]com/boa-z/qqbot|vohive[-]release|GO[.]?PRIVATE|GO[.]?NOSUMDB|GH[_]PAT' -- \
-				go.mod go.sum .github Dockerfile Dockerfile.github docker-compose.yml Makefile scripts internal cmd pkg web/src \
+			git grep -nE 'github[.]com/iniwex5|github[.]com/boa-z/qqbot|iniwex[/]vohive|DOCKERHUB[_]|secrets[.]DOCKERHUB|vohive[-]release|GO[.]?PRIVATE|GO[.]?NOSUMDB|GH[_]PAT' -- \
+				go.mod go.sum .github Dockerfile Dockerfile.github Dockerfile.runtime docker-compose.yml docker-compose.hub.yml DOCKERHUB.md Makefile scripts internal cmd pkg web/src \
 				':!internal/web/dist/**' ':!web/dist/**' || true
 			git grep -nE 'replace[[:space:]].*=>[[:space:]]*(\.{1,2}/|/|~)' -- \
-				go.mod go.sum .github Dockerfile Dockerfile.github docker-compose.yml Makefile scripts internal cmd pkg web/src \
+				go.mod go.sum .github Dockerfile Dockerfile.github Dockerfile.runtime docker-compose.yml docker-compose.hub.yml DOCKERHUB.md Makefile scripts internal cmd pkg web/src \
 				':!internal/web/dist/**' ':!web/dist/**' || true
 		} | sed '/^$/d'
 	)"