代码提交 → 构建镜像 → 扫描漏洞 → 推送仓库 → 部署

# GitHub Actions 示例
name: Build and Push
on:
  push:
    branches: [main]

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Build
        run: docker build -t my-app:${{ github.sha }} .
      - name: Push
        run: |
          docker tag my-app:${{ github.sha }} registry/my-app:latest
          docker push registry/my-app:latest

# SSH 部署
ssh user@server "docker pull registry/my-app:latest && docker compose up -d"