制品管理最佳实践：Docker镜像、npm包与二进制文件的存储、版本控制与分发策略

artifact-management by aj-geddes/useful-ai-prompts

146 周安装量

162 GitHub Stars

GitHub

安装命令

npx skills add https://github.com/aj-geddes/useful-ai-prompts --skill artifact-management

开发运维 Docker 版本控制

🇨🇳中文介绍

制品管理

概述

实施全面的制品管理策略，用于跨环境存储、版本控制和分发构建的二进制文件、Docker 镜像和软件包。

使用场景

Docker 镜像仓库管理
软件包发布与版本控制
构建制品存储与检索
容器镜像优化
制品保留策略
多仓库分发
依赖项缓存

快速开始

最小工作示例：

# Dockerfile with multi-stage build for optimization
FROM node:18-alpine AS dependencies
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production

FROM node:18-alpine AS builder
WORKDIR /app
COPY package*.json ./
RUN npm ci
COPY . .
RUN npm run build

FROM node:18-alpine AS runtime
WORKDIR /app
COPY --from=dependencies /app/node_modules ./node_modules
COPY --from=builder /app/dist ./dist
COPY package*.json ./

EXPOSE 3000
HEALTHCHECK --interval=30s --timeout=3s --start-period=40s --retries=3 \
  CMD node healthcheck.js

CMD ["node", "dist/server.js"]

// ... (完整实现请参阅参考指南)

参考指南

references/ 目录下的详细实现：

广告位招租

在这里展示您的产品或服务

触达数万 AI 开发者，精准高效

联系我们

指南	内容
Docker Registry Configuration	Docker 仓库配置
GitHub Container Registry (GHCR) Push	GitHub 容器仓库推送
npm Package Publishing	npm 软件包发布、制品保留策略、制品版本控制、GitLab 软件包仓库

🇺🇸English

Artifact Management

Overview
When to Use
Quick Start
Reference Guides
Best Practices

Overview

Implement comprehensive artifact management strategies for storing, versioning, and distributing built binaries, Docker images, and packages across environments.

When to Use

Docker image registry management
Package publication and versioning
Build artifact storage and retrieval
Container image optimization
Artifact retention policies
Multi-registry distribution
Dependency caching

Quick Start

Minimal working example:

# Dockerfile with multi-stage build for optimization
FROM node:18-alpine AS dependencies
WORKDIR /app
COPY package*.json ./
RUN npm ci --only=production

FROM node:18-alpine AS builder
WORKDIR /app
COPY package*.json ./
RUN npm ci
COPY . .
RUN npm run build

FROM node:18-alpine AS runtime
WORKDIR /app
COPY --from=dependencies /app/node_modules ./node_modules
COPY --from=builder /app/dist ./dist
COPY package*.json ./

EXPOSE 3000
HEALTHCHECK --interval=30s --timeout=3s --start-period=40s --retries=3 \
  CMD node healthcheck.js

CMD ["node", "dist/server.js"]

// ... (see reference guides for full implementation)

Reference Guides

Detailed implementations in the references/ directory:

Guide	Contents
Docker Registry Configuration	Docker Registry Configuration
GitHub Container Registry (GHCR) Push	GitHub Container Registry (GHCR) Push
npm Package Publishing	npm Package Publishing, Artifact Retention Policy, Artifact Versioning, GitLab Package Registry

Best Practices

✅ DO

Use semantic versioning for artifacts
Implement image scanning before deployment
Set retention policies for old artifacts
Use multi-stage builds for Docker images
Sign and verify artifacts
Implement artifact immutability
Document artifact metadata
Use specific base image versions
Implement vulnerability scanning
Cache layers aggressively
Tag images with commit SHA
Compress artifacts for storage

❌ DON'T

Use latest tag as sole identifier
Store secrets in artifacts
Push artifacts without scanning
Use untrusted base images
Skip artifact verification
Overwrite published artifacts
Mix binary and source artifacts
Ignore image layer optimization
Store build logs with sensitive data

Weekly Installs

105

Repository

aj-geddes/usefu…-prompts

GitHub Stars

116

First Seen

Jan 21, 2026

Security Audits

Gen Agent Trust HubPass SocketPass SnykPass

Installed on

opencode88

gemini-cli87

claude-code87

codex82

cursor81

github-copilot70