From f0c8fb8923aab8582832aaa6b75fbc29c13a973c Mon Sep 17 00:00:00 2001
From: argszero <argszero@argszerodeMac-mini.local>
Date: Sat, 22 Aug 2026 07:16:40 +0800
Subject: [PATCH] ci(docker): publish images only on version tags (rant
 2026-08-22T07:14:15)

---
 .github/workflows/docker-publish.yml | 7 ++++---
 README.en.md                         | 2 +-
 README.md                            | 2 +-
 3 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index 2514fba..cfdafce 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -1,9 +1,11 @@
 name: Docker Publish
 
+# rant 2026-08-22T07:14:15：改为仅 tag 触发（对齐 emrg 发版节奏——rant 说发版才发版）。
+# main push / PR merge 只跑 ci.yml；显式打 tag vX.Y.Z 才构建发布 GHCR 镜像。
 on:
   push:
-    branches: [main]
     tags: ['v*']
+  workflow_dispatch:
 
 env:
   IMAGE_NAME: ghcr.io/${{ github.repository }}
@@ -34,10 +36,9 @@ jobs:
         with:
           images: ${{ env.IMAGE_NAME }}
           tags: |
-            type=ref,event=branch
             type=ref,event=tag
             type=sha,prefix=,format=short
-            type=raw,value=latest,enable={{is_default_branch}}
+            type=raw,value=latest,enable={{is_tag}}
 
       - name: Build and push
         uses: docker/build-push-action@v6
diff --git a/README.en.md b/README.en.md
index 7bb1e00..6efc524 100644
--- a/README.en.md
+++ b/README.en.md
@@ -29,7 +29,7 @@ AITokenPool is an open-source **AI token sharing platform / multi-model gateway*
 
 ```bash
 docker compose up -d --build
-# or use the published image
+# or use a published image (images are released on version tags; latest points to the newest release)
 docker pull ghcr.io/argszero/aitokenpool:latest
 docker run -p 8080:8080 -v "$PWD/atp-data:/data" \
   -e ATP_MASTER_KEY=$(openssl rand -hex 32) \
diff --git a/README.md b/README.md
index e679f50..2d0a07c 100644
--- a/README.md
+++ b/README.md
@@ -29,7 +29,7 @@ AITokenPool 是一个开源的 **AI Token 共享平台 / 多模型网关**：把
 
 ```bash
 docker compose up -d --build
-# 或直接使用已发布镜像
+# 或直接使用已发布镜像（镜像随版本 tag 发布，latest 指向最新发版）
 docker pull ghcr.io/argszero/aitokenpool:latest
 docker run -p 8080:8080 -v "$PWD/atp-data:/data" \
   -e ATP_MASTER_KEY=$(openssl rand -hex 32) \