ADR-013: GitHub Container Registry (GHCR) as Container Registry
Use GHCR for all Docker image storage and distribution
Use GHCR for all Docker image storage and distribution
Controls GitHub Actions minute consumption by cutting per-run cost, not PR count. The org's 50k included-minute pool is effectively a single-repo pool that follows active development; in May 2026 sv0-platform's ci.yml alone was ~80% of it (~36k measured minutes), dominated by a tail of multi-arch (amd64+arm64-via-QEMU) image builds that HUNG for hours on PR pushes (67 runs over 300 min, worst 18h). Decision: amd64-only image builds on PRs (multi-arch stays on main/release tags), cancel superseded PR runs, path-gate the non-required image build, and cap heavy jobs with timeout-minutes. Keeps the PR-per-change workflow intact. Shipped in sv0-platform#1301 (issue #1300); timeout follow-up pending.
GitHub Actions workflows across the SecurityV0 workspace. All repos live under the securityv0 GitHub organization.
Strategic research on SecurityV0's Pre-Deployment Assurance capability (W2 core)
Plan for isolated self-hosted GitHub Actions runner on Mac mini to eliminate Actions minutes billing limit
Research on authoritative ServiceNow evidence sources for execution and role changes, deterministic Entra SP to ServiceNow identity linkage, and top autonomous execution types in enterprises
Multi-source research synthesis on visual UX testing: closed-loop agent verification, Playwright visual regression, CI gates, component testing. Three options from minimal to full-stack.