Ship the binary in the runtime image and gate it in CI

.github/workflows/ci.yml

@@ -42,3 +42,13 @@ jobs:
           go run ./cmd/epmon validate --config config.example.json
       - run: go vet ./...
       - run: go test -race ./...
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: image builds and runs
+        run: |
+          docker build -t epmon:ci .
+          docker run --rm --entrypoint /epmon epmon:ci version
+      - name: compose file parses
+        run: docker compose config

Dockerfile

@@ -14,6 +14,7 @@ RUN CGO_ENABLED=0 go build -trimpath \
 
 FROM alpine:3.21
 RUN adduser -D -H epmon
+COPY --from=build /epmon /epmon
 USER epmon
 WORKDIR /data
 EXPOSE 8080