ci: publish multi-arch container image

[jusso-dev]

Adds QEMU setup and publishes linux/amd64 plus linux/arm64 images to GHCR. Updates deployment architecture documentation. Validation: actionlint, YAML parse, local linux/arm64 Docker build, git diff check.

Summary by CodeRabbit

• New Features

  • Published container images now support both AMD64 and ARM64 architectures.
  • Multi-platform image manifests are generated and validated automatically.

• Documentation

  • Updated deployment documentation to reflect ARM64 support alongside AMD64.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 72a0fae6-5cbf-47af-b4c9-cc8f20ee864b

📥 Commits

Reviewing files that changed from the base of the PR and between a608eb2 and f64ffba.

📒 Files selected for processing (3)

• .github/workflows/container-image.yml
• README.md
• deploy/README.md

---

📝 Walkthrough

Walkthrough

The container workflow now builds amd64 and arm64 images separately, publishes multi-platform manifests, validates manifest digests, and attests those manifests. The README files now document amd64 and arm64 support.

Changes

Multi-architecture container release

Layer / File(s)	Summary
Architecture-specific image builds .github/workflows/container-image.yml	The workflow builds amd64 and arm64 images in separate jobs. Each job uses architecture-specific caching and publishes image digests with provenance and SBOM generation.
Manifest publication and architecture documentation .github/workflows/container-image.yml, README.md, deploy/README.md	The workflow creates and validates a multi-platform manifest for each tag, then attests the manifest digest. Deployment documentation now lists linux/amd64 and linux/arm64 support.

Estimated code review effort: 4 (Complex) | ~45 minutes

Sequence Diagram(s)

sequenceDiagram
  participant build_amd64
  participant build_arm64
  participant publish_manifest
  participant Registry
  build_amd64->>Registry: Push amd64 image by digest
  build_arm64->>Registry: Push arm64 image by digest
  build_amd64->>publish_manifest: Provide amd64 digest
  build_arm64->>publish_manifest: Provide arm64 digest
  publish_manifest->>Registry: Create multi-platform manifest for each tag
  Registry-->>publish_manifest: Return manifest digest
  publish_manifest->>Registry: Attest manifest digest

Loading

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch agent/multiarch-ghcr

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}