integrations.md

Integrations

This page documents common ways to integrate prek into CI and container workflows.

Docker

prek is published as a distroless container image at:

• ghcr.io/j178/prek

The image is based on scratch (no shell, no package manager). It contains the prek binary at /prek.

A common pattern is to copy the binary into your own image:

FROM debian:bookworm-slim
COPY --from=ghcr.io/j178/prek:v0.3.4 /prek /usr/local/bin/prek

If you prefer, you can also run the distroless image directly:

docker run --rm ghcr.io/j178/prek:v0.3.4 --version

Verifying Images

Docker images are signed with GitHub Attestations to verify they were built by official prek workflows. Verify using the GitHub CLI:

$ gh attestation verify --owner j178 oci://ghcr.io/j178/prek:latest
Loaded digest sha256:xxxx... for oci://ghcr.io/j178/prek:latest
Loaded 1 attestation from GitHub API
✓ Verification succeeded!

- Attestation #1
  - Build repo:..... j178/prek
  - Build workflow:. .github/workflows/build-docker.yml@refs/tags/vX.Y.Z

!!! tip

Use a specific version tag (e.g., `ghcr.io/j178/prek:v0.3.4`) or image
digest rather than `latest` for verification.

GitHub Actions

--8<-- "README.md:github-actions"