image field of your tinfoil-config.yml.
If instead you have source code you want to deploy, you’ll need to build an image for it first. How you do this depends on the visibility of the repository:
- Public source code → use
tinfoil-public-containers-template. When deploying public code you can do it all in one repo. Thepublic-containerstemplate contains one workflow that builds the image, updates the local config with the new digest, and releases a new version. Essentially, it consolidates thetinfoil-containers-hello-worldrepo and thetinfoil-containers-templaterepo. - Private source code → keep your code in its own private repo and use
tinfoil-containers-hello-worldas the build-and-publish pattern (Dockerfile + workflow that pushes to GHCR). Then reference the published image from atinfoil-containers-templatefork like the quickstart.
If the published image is private (not just the source), Tinfoil needs registry credentials to pull it at deploy time. See Private images. Public images work without any configuration.

