-4

.tangled/workflows/workflow-amd64.yaml

··· 3 3 architecture: amd64 4 4 5 5 steps: 6 6 - - name: download dependencies 7 7 - command: | 8 8 - go mod download 9 9 - 10 6 - name: build manager binary 11 7 command: | 12 8 make build

+6 -6

.tangled/workflows/workflow-arm64.yaml

··· 1 1 + when: 2 2 + - event: ["manual"] 3 3 + tag: ["v*"] 4 4 + 1 5 engine: kubernetes 2 6 image: golang:1.25-trixie 3 7 architecture: arm64 ··· 7 11 command: | 8 12 go mod download 9 13 10 10 - - name: build manager binary 11 11 - command: | 12 12 - make build 13 13 - 14 14 - - name: verify build artifacts 14 14 + - name: build manager 15 15 command: | 16 16 - ls -lh bin/ 16 16 + make build

+1

Dockerfile

··· 27 27 # Use debian-slim for debugging (normally we'd use distroless) 28 28 # Refer to https://github.com/GoogleContainerTools/distroless for more details 29 29 FROM debian:12-slim 30 30 + RUN apt-get update && apt-get install -y ca-certificates && rm -rf /var/lib/apt/lists/* 30 31 WORKDIR / 31 32 COPY --from=builder /workspace/loom/manager . 32 33 USER 65532:65532