Container Images

Two private images — the control server (with the admin UI baked in) and the sink — published to the GitHub Container Registry by CI.

CI builds and publishes both images on every push to main, release branches, and tags:

Image Contents
ghcr.io/levantar-ai/tripwire-control-server The Go control server with the admin UI baked in
ghcr.io/levantar-ai/tripwire-sink The Rust honeytoken-sink (release build)

Tags: the branch name, the git SHA, latest (default branch only), and any v* tag. Pull with a GitHub token that has read:packages: 

echo "$GHCR_TOKEN" | docker login ghcr.io -u <github-username> --password-stdin
docker pull ghcr.io/levantar-ai/tripwire-control-server:latest
docker pull ghcr.io/levantar-ai/tripwire-sink:latest

Use a classic PAT with read:packages — fine-grained tokens don't have a working permission for container packages. For arm64 / Graviton, use the binary downloads.

Overview Deployment Options