Use REGISTRY_USERNAME/REGISTRY_PASSWORD instead of
DOCKERHUB_SVRNTY_USERNAME/DOCKERHUB_SVRNTY_ACCESS_TOKEN.
Add busybox to SDK apko config for /bin/sh support.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- apko/sdk.yaml: run-as 65532, create /home/nonroot and /app owned by nonroot
- sdk.Dockerfile: USER 65532, set HOME and DOTNET_CLI_HOME to /home/nonroot
- README/DOCKERHUB: update examples to use COPY --chown=nonroot and /app/publish
dotnet restore writes NuGet cache to $DOTNET_CLI_HOME/.nuget/packages
which is now /home/nonroot/.nuget/packages — no root needed.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- apko configs for runtime (ICU), runtime-invariant (no ICU), and SDK variants
- Build workflow with dynamic matrix from .NET release metadata (EOL-aware)
- Daily update-check workflow to detect new .NET versions
- Docker Scout PR analysis workflow
- LTS/STS floating tags, multi-arch (amd64 + arm64)
- Makefile for local builds and version discovery
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
