commit 5193684bd785209044d2bceb933836c5e0387ab8
Author: Vojtěch Mareš <vojtech@mares.cz>
Date:   Mon Sep 8 19:02:44 2025 +0200

    feat: initial commit
    
    Signed-off-by: Vojtěch Mareš <vojtech@mares.cz>

diff --git a/.editorconfig b/.editorconfig
new file mode 100644
index 0000000..87a0020
--- /dev/null
+++ b/.editorconfig
@@ -0,0 +1,13 @@
+root = true
+
+[*]
+indent_style = space
+indent_size = 2
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+end_of_line = lf
+max_line_length = null
+
+[Makefile]
+indent_style = tab
diff --git a/.woodpecker/build.yaml b/.woodpecker/build.yaml
new file mode 100644
index 0000000..962c1de
--- /dev/null
+++ b/.woodpecker/build.yaml
@@ -0,0 +1,24 @@
+when:
+  event: push
+
+variables:
+  - &buildx-plugin "woodpeckerci/plugin-docker-buildx:6.0.2"
+  - &repo "registry.mareshq.com/library/container-tools"
+  - &platforms "linux/arm64/v8,linux/amd64"
+  - &image_tag "${CI_COMMIT_REF/ref\/heads\//}-${CI_COMMIT_SHA:0:8}"
+
+steps:
+  build:
+    image: *buildx-plugin
+    settings:
+      repo: *repo
+      platforms: *platforms
+      tag: *image_tag
+      logins:
+        - registry: https://registry.mareshq.com
+          username:
+            from_secret: registry_username
+          password:
+            from_secret: registry_password
+    when:
+      event: push
diff --git a/.woodpecker/lint.yaml b/.woodpecker/lint.yaml
new file mode 100644
index 0000000..9928e8d
--- /dev/null
+++ b/.woodpecker/lint.yaml
@@ -0,0 +1,15 @@
+when:
+  - event: [pull_request, tag, cron]
+  - event: push
+    branch:
+      - ${CI_REPO_DEFAULT_BRANCH}
+      - renovate/*
+
+steps:
+  lint-dockerfile:
+    image: ghcr.io/hadolint/hadolint:v2.13.1-alpine # 2025-09-02
+    depends_on: []
+    commands:
+      - hadolint --ignore DL3003 --ignore DL3018 Dockerfile
+    when:
+      path: "Dockerfile"
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..1c93783
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,7 @@
+FROM alpine:3.22 AS base
+
+RUN apk add --no-cache ca-certificates
+
+FROM base AS container-tools
+
+RUN apk add --no-cache skopeo oras-cli cosign
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..e69de29