Is ghcr.io/gleanwork/local-mcp-server a public container repository?

[ivanilves]

Hi there 👋

I can not pull images, e.g. ghcr.io/gleanwork/local-mcp-server:latest from ghcr.io/gleanwork/local-mcp-server container repository and need to build them myself from source and then push into my registry. This gives me an extra [unneeded] hop in Glean adoption.

$ docker pull ghcr.io/gleanwork/local-mcp-server:latest
Error response from daemon: denied

$ lstags ghcr.io/gleanwork/local-mcp-server
INFO[0000] BATCH 1 of 1
INFO[0000] ANALYZE ghcr.io/gleanwork/local-mcp-server
FATA[0000] Bad response status: 403 Forbidden >> https://ghcr.io/v2/gleanwork/local-mcp-server/tags/list

Could you please advise?

Thank you!

[rwjblue-glean]

Hmmm.🤔

@chris-freeman-glean - Mind taking a look?

[dhruv7539]

Opened PR with Docker/GHCR improvements: #342

Includes:

• clearer GHCR auth + fallback docs for denied/403 pull failures
• a post-publish workflow check that warns if anonymous pull access is not available

[dhruv7539]

Updated PR #342 with an additional hardening commit:\n\n- enforce (not just warn) anonymous GHCR access in publish workflow, with retry for registry propagation\n- add anonymous pull + runtime smoke checks after publish\n\nThis should make accidental private package visibility regressions visible immediately in CI.

[rwjblue-glean]

#342 addressed this pretty well I think (thanks @dhruv7539!), closing for now (happy to reopen if I've misunderstood something).