[fgirolami29]

Scope

• Shared PHP CLI image factory for PHP 8.1, 8.2, 8.3 and 8.4, with Node 22, Composer 2 and common PHP extensions.
• Playwright 1.62.1 Chromium image with browser dependencies installed at image build time.
• Explicit --dry-run, --build, --check and --publish commands.
• Pull request validation builds and smoke-tests all five images on the trusted DKR-01 organization runner. Fork pull requests are excluded.
• GHCR authentication and publication run only for an explicit manual workflow_dispatch; pull request validation does not publish.
• Runner registration checksum parser patch.

Review and validation status

Ready for review at head 08993059f7e853469ceea80e4dc0e54e383d2334.

Local static checks passed: workflow YAML, event gates (trusted PR, fork PR, manual dispatch and foreign repository), bash -n for the image script and workflow shell blocks, and Python syntax parsing for the runner patch. Existing image versions, build/smoke-test commands, runner labels, disk preflight, concurrency and timeout are unchanged.

Premerge validation is now queued in GitHub Actions, event pull_request, job 121082842427. The job has not started and has no step results. Container builds, toolchain smoke tests and image publication remain unverified.

Both consumer runners are registered and can access Docker: Barbagia Media Manager and wp-life-helper job logs identify their dedicated DKR-01 runners and reach authenticated GHCR image pulls. The proposed tags return not found. No consumer tests have run successfully in these images.

Remaining prerequisite sequence

1. Let the queued premerge job build and run ci/images/build.sh --check on DKR-01. This public repository needs access to the organization runner group.
2. After successful checks and authorized manual publication, verify all five GHCR tags can be pulled from both CodeCornTech/barbagia-media-manager and fgirolami29/wp-life-helper; private packages need explicit Actions access across owners.
3. Retry consumer CI after image availability and access are confirmed. Consumers must not merge until their actual jobs pass.

The manual dispatcher remains absent from the default branch. No merge, tag, release, deployment, GHCR login or image push has been performed.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-25T05:09:23.041650Z	fee863b	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.