
A minimal, production-minded CI pipeline with GitHub Actions
Build, test, scan and push a container image on every commit — with caching, least-privilege tokens and no long-lived secrets.

Build, test, scan and push a container image on every commit — with caching, least-privilege tokens and no long-lived secrets.