Diatreme

Diatreme is a release/deployment orchestrator. It has two independent surfaces in one repository that communicate over HTTP, neither imports the other:

• Composite action (action.yml + scripts/), published to the GitHub Marketplace. Runs semantic versioning, GitHub Releases, Docker image build and promotion, image scanning with SBOM/finding routing, and promotion-PR automation.
• Cloudflare Worker (worker/), the hosted GitHub App backend at api.diatreme.magmamoose.com. An OIDC → installation-token broker and an App/bot-attributed commit/tag signer. Most users never touch it directly.

Install the action:

- uses: MagmaMoose/diatreme@v2
  with:
    mode: release

Where to go next

• New here? Start with Setup.
• Want the big picture? See Architecture.
• Configuring a pipeline? See Using the action.
• The full, exhaustive input/output reference lives in the repository README.

The two surfaces at a glance

Surface	Path	Toolchain	Ships to
Composite action	action.yml + scripts/*.sh	Bash, actionlint, shellcheck, bats	GitHub Marketplace
Cloudflare Worker	worker/	TypeScript, wrangler, vitest	Cloudflare

Related

• MagmaMoose/diatreme-pro: the separate private observability dashboard (release/run history) for the worker.