gitea_admin
  • Joined on 2026-07-03
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-20 05:12:28 +00:00
1a36f43c69 ci: bump image digests to 37b297bf5c
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-20 04:48:50 +00:00
37b297bf5c ci: reclaim dind disk after each image build
5d7f46483e runbook: recovering the queue after a runner restart
Compare 2 commits »
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-20 04:27:51 +00:00
b02d4e85c6 ci: record that act_runner ignores max-parallel
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-20 04:13:34 +00:00
d70a7b622c ci: cache the trivy vuln DB in a named volume, not a $PWD bind
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-20 04:11:08 +00:00
2098443f31 ci: build images one at a time
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-20 03:48:37 +00:00
b35c551160 ci: the digest-guard test depended on state CI itself mutates
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-20 03:35:15 +00:00
f87d8d4d78 runbook: the 14-minute 'Set up job' failure and its cause
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-19 09:39:57 +00:00
c537073c21 deps: everything to latest stable
4544765ec5 test: scope the process-group assertion to this run's own children
Compare 2 commits »
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-19 09:18:17 +00:00
f2b159ef7e ci: bump image digests to ca21b6e70d
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-19 09:11:25 +00:00
ca21b6e70d ci: gitleaks was passing without scanning anything
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-19 09:00:46 +00:00
dc51bd1d9d ci: move the bump job's master guard from job level to step level
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-19 08:48:54 +00:00
78a0a6d500 runbook: record how the image gate was taken to zero findings
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-18 13:05:27 +00:00
4a426dbe50 worker: create namespaces with helm, drop the kubectl binary
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-18 12:43:39 +00:00
a59d3848ae ci: kubectl v1.35.3 -> v1.36.2 to clear CVE-2026-35469
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-18 12:20:19 +00:00
a51227d952 ci: run helm from a checksum-pinned binary, not a container
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-18 12:13:54 +00:00
c76154aeaa review: fix 26 findings from a 4-agent audit
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-18 11:24:54 +00:00
77d560ddae ci: move buildx layer cache to the registry
c9d0176bb3 ci: run trivy directly; document CI/CD setup in RUNBOOK
Compare 2 commits »
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-17 10:52:01 +00:00
851f8919a8 ci: fix coverage target, pip-audit scope, bandit config
gitea_admin pushed to master at gitea_admin/svcforge 2026-07-17 10:45:04 +00:00
50c2fe2a1e svcforge: reference implementation
gitea_admin created branch master in gitea_admin/svcforge 2026-07-17 10:45:04 +00:00