From 8f41d273d778d9de4b3a817717bcca3917e6d40c Mon Sep 17 00:00:00 2001
From: vadimenovikau <vadime.novikau@nuvisphere.de>
Date: Thu, 20 Aug 2026 08:48:07 +0000
Subject: [PATCH] docs: document centralized organization workflows

---
 README.md | 19 ++++++-------------
 1 file changed, 6 insertions(+), 13 deletions(-)

diff --git a/README.md b/README.md
index 67a3e52..cd5c27f 100644
--- a/README.md
+++ b/README.md
@@ -1,15 +1,10 @@
 # Platform CI
 
-This repository is the central, public source for Nuvisphere's Gitea scoped
-workflows. Workflow code contains no credentials. Each consuming owner or
-organization supplies its own `REGISTRY_USERNAME`, `REGISTRY_TOKEN` and
-`QUICKSTACK_API_TOKEN` Actions secrets.
+This repository is the central, public source for Nuvisphere's Gitea scoped workflows and the shared QuickStack OCI action.
 
-Repositories opt into deployment by committing `.quickstack/deploy.json`.
-The central workflow builds every declared target once, publishes an immutable
-`sha-<commit>` OCI tag to the Gitea Container Registry and changes QuickStack
-to the exact `@sha256:` digest. A failed rollout or postflight automatically
-restores the previous QuickStack configuration.
+Workflow code contains no credentials. Each consuming organization supplies its own `REGISTRY_USERNAME`, `REGISTRY_TOKEN` and `QUICKSTACK_API_TOKEN` Actions secrets. Organization-owned `Platform-CI` repositories only provide the scoped workflow entrypoint and call this central action.
+
+Repositories opt into deployment by committing `.quickstack/deploy.json`. The central workflow builds every declared target once, publishes an immutable `sha-<commit>` OCI tag to the Gitea Container Registry and changes QuickStack to the exact `@sha256:` digest. A failed rollout or postflight automatically restores the previous QuickStack configuration.
 
 Example:
 
@@ -24,7 +19,7 @@ Example:
       "targets": [
         {
           "name": "website",
-          "image": "vadimenovikau/example",
+          "image": "nuvisphere/example",
           "dockerfile": "Dockerfile",
           "context": ".",
           "appId": "app-example-12345678",
@@ -39,6 +34,4 @@ Example:
 }
 ```
 
-Pull requests build all matching targets without logging in, publishing or
-deploying. Pushes and manual runs publish and deploy. The commit marker
-`[skip quickstack-deploy]` skips a push deliberately.
+Pull requests build all matching targets without logging in, publishing or deploying. Pushes and manual runs publish and deploy. The commit marker `[skip quickstack-deploy]` skips a push deliberately.