2026-08-15 - 2026-11-15
Overview
18 Pull requests merged by 1 user
Merged
#18 fix: give uid 1000 a passwd entry, so ssh-keygen runs as the runner user
Merged
#17 fix: add openssh-keygen, so zegit's SSHSIG oracle runs on this runner
Merged
#16 fix: build the runner with a schema that accepts Gitea 28's matrix jobs
Merged
#15 fix: upgrade brotli-libs and gate on it (KEV CVE-2026-111497)
Merged
#14 ci: refuse to re-publish an existing image tag (zegit#262)
Merged
#13 ci: sign every published runner image by digest (zegit#262)
Merged
#12 ci: read the org-scoped ZEGIT_CI_PACKAGE_TOKEN, not a repo-local name
Merged
#11 ci: build without an exporter on validation runs; assert chromium and psql
Merged
#10 build: chromium, font-noto and postgresql-client for the browser gates
Merged
#9 chore(ci): assert the busybox/coreutils layer, and record the derived audit
Merged
#8 fix: combine per-arch tags with imagetools, not docker manifest
Merged
#7 ci: build this image on Gitea via the in-cluster buildkitd
Merged
#6 fix: bake openssl and jq into the runner image, and assert them
Merged
#5 ci: assert the published image still contains the toolchain the gates need
Merged
#4 fix: restore gcc, musl-dev, python3 and py3-yaml to the image
Merged
#3 docs: correct the registry notes in the Dockerfile header
Merged
#2 ci: build and publish the image on GitHub to ghcr.io
Merged
#1 fix: add git-daemon so git-http-backend exists, plus a publish script