dockerfile and build publish action

Author: v-rocheleau

.github/workflows/submission-snapshot-build.yaml

@@ -0,0 +1,41 @@
+name: Submission Snapshot Lint
+on: 
+  push:
+    paths:
+      - 'submission-snapshot/**'
+
+jobs:
+  build-pusg:
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - uses: actions/checkout@v5
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Short commit SHA
+        run: echo "SHORT_SHA=$(git rev-parse --short HEAD)" >> $GITHUB_ENV
+
+      - name: Prepare image name
+        run: |
+          IMAGE_NAME="ghcr.io/${GITHUB_REPOSITORY,,}/submission-snapshot:${SHORT_SHA}"
+          echo "IMAGE_NAME=$IMAGE_NAME" >> $GITHUB_ENV
+
+      - name: Build Docker image
+        run: |
+          echo "Building image: $IMAGE_NAME"
+          docker build -t $IMAGE_NAME ./submission-snapshot
+
+      - name: Push Docker image
+        run: |
+          echo "Pushing image: $IMAGE_NAME"
+          docker push $IMAGE_NAME

submission-snapshot/Dockerfile

@@ -0,0 +1,26 @@
+FROM ghcr.io/astral-sh/uv:0.10.7-python3.14-trixie-slim
+
+
+# Setup a non-root user
+RUN groupadd --system --gid 999 pcgl \
+ && useradd --system --gid 999 --uid 999 --create-home pcgl
+
+
+WORKDIR /workflow
+
+COPY pyproject.toml .
+COPY uv.lock .
+COPY main.py .
+
+# Install uv
+
+# Disable development dependencies
+ENV UV_NO_DEV=1
+
+# Install dependencies
+RUN uv sync --locked
+
+USER pcgl
+
+# Run workflow
+CMD [ "uv", "run", "main.py" ]