🐛 fix: link GHCR packages to repository and use GITHUB_TOKEN (#698)

Packages were not appearing on the repository page because:

1. The Dockerfile was missing OCI labels (org.opencontainers.image.source)
   that GitHub uses to auto-link container packages to repositories

2. Release workflows used personal access tokens (secrets.GHCR_TOKEN,
   secrets.CR_TOKEN) instead of GITHUB_TOKEN. PATs don't trigger the
   automatic package-to-repository linking that GITHUB_TOKEN provides

Changes:
- Add OCI labels to Dockerfile for automatic GHCR package linking
- Switch ci-release.yaml to use GITHUB_TOKEN with packages:write permission
- Switch helm-release.yaml to use GITHUB_TOKEN for Docker and Helm login
- Fix remaining llm-d-incubation org references in docs

Signed-off-by: Andrew Anderson <andy@clubanderson.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Author: clubanderson

.github/workflows/ci-release.yaml

@@ -7,6 +7,10 @@ on:
   release:
     types: [published]  # Also runs when a GitHub release is published
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   docker-build-and-push:
     runs-on: ubuntu-latest
@@ -42,7 +46,11 @@ jobs:
         uses: docker/setup-buildx-action@v3
 
       - name: Log in to GitHub Container Registry
-        run: echo "${{ secrets.GHCR_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ github.token }}
 
       - name: Build and push multi-arch image
         run: |

.github/workflows/helm-release.yaml

@@ -70,7 +70,11 @@ jobs:
       # 4. Log in to GHCR for Docker push
       # -----------------------------------------
       - name: Docker login GHCR
-        run: echo "${{ secrets.CR_TOKEN }}" | docker login ghcr.io -u ${{ secrets.CR_USER }} --password-stdin
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ github.token }}
 
       # -----------------------------------------
       # 5. Build and push multi-arch Docker image
@@ -121,12 +125,10 @@ jobs:
       # 8. Login to GHCR for chart publishing
       # -----------------------------------------
       - name: Login to GHCR (Helm)
-        env:
-          GITHUB_TOKEN: ${{ secrets.CR_TOKEN }}
         run: |
           helm registry login ghcr.io \
-            --username ${{ secrets.CR_USER }} \
-            --password "$GITHUB_TOKEN"
+            --username ${{ github.actor }} \
+            --password "${{ github.token }}"
           echo "Helm registry login successful"
 
       # -----------------------------------------
@@ -140,8 +142,6 @@ jobs:
       # 10. Push chart to GHCR
       # -----------------------------------------
       - name: Push Helm chart
-        env:
-          GITHUB_TOKEN: ${{ secrets.CR_TOKEN }}
         run: |
           VERSION="${{ steps.version.outputs.version }}"
           CHART_FILE="workload-variant-autoscaler-${VERSION}.tgz"

Dockerfile

@@ -27,6 +27,11 @@ RUN CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -a -o ma
 # Use distroless as minimal base image to package the manager binary
 # Refer to https://github.com/GoogleContainerTools/distroless for more details
 FROM gcr.io/distroless/static:nonroot
+
+LABEL org.opencontainers.image.source="https://github.com/llm-d/llm-d-workload-variant-autoscaler"
+LABEL org.opencontainers.image.description="Workload Variant Autoscaler (WVA) - GPU-aware autoscaler for LLM inference workloads"
+LABEL org.opencontainers.image.licenses="Apache-2.0"
+
 WORKDIR /
 COPY --from=builder /workspace/manager .
 USER 65532:65532

README.md

@@ -205,7 +205,7 @@ Apache 2.0 - see [LICENSE](LICENSE) for details.
 
 ## Related Projects
 
-- [llm-d infrastructure](https://github.com/llm-d-incubation/llm-d-infra)
+- [llm-d infrastructure](https://github.com/llm-d/llm-d-infra)
 - [llm-d main repository](https://github.com/llm-d/llm-d)
 
 ## References

docs/README.md

@@ -58,7 +58,7 @@ Contributing to WVA:
 ## Additional Resources
 
 - [Community Proposal](https://docs.google.com/document/d/1n6SAhloQaoSyF2k3EveIOerT-f97HuWXTLFm07xcvqk/edit)
-- [llm-d Infrastructure](https://github.com/llm-d-incubation/llm-d-infra)
+- [llm-d Infrastructure](https://github.com/llm-d/llm-d-infra)
 - [API Proposal](https://docs.google.com/document/d/1j2KRAT68_FYxq1iVzG0xVL-DHQhGVUZBqiM22Hd_0hc/edit)
 
 ## Need Help?