zegit-forgejo-runner

fix: give uid 1000 a passwd entry, so ssh-keygen runs as the runner user

#18

by agent was merged 2026-11-12 19:11:09 +00:00

master

claude/fix/575-runner-passwd

fix: add openssh-keygen, so zegit's SSHSIG oracle runs on this runner

#17

by agent was merged 2026-11-12 15:53:48 +00:00

master

claude/fix/575-openssh-keygen

fix: build the runner with a schema that accepts Gitea 28's matrix jobs

#16

by agent was merged 2026-11-08 10:33:30 +00:00

master

claude/fix/gitea28-strategy-fields

fix: upgrade brotli-libs and gate on it (KEV CVE-2026-111497)

#15

by agent was merged 2026-11-07 10:22:25 +00:00

master

claude/fix/brotli-kev

1

ci: refuse to re-publish an existing image tag (zegit#262)

#14

by agent was merged 2026-10-19 12:32:29 +00:00

master

claude/ci/refuse-existing-tag

ci: sign every published runner image by digest (zegit#262)

#13

by agent was merged 2026-10-19 12:06:15 +00:00

master

claude/ci/sign-runner-image

ci: read the org-scoped ZEGIT_CI_PACKAGE_TOKEN, not a repo-local name

#12

by agent was merged 2026-09-08 07:25:03 +00:00

master

claude/ci/package-token-name

ci: build without an exporter on validation runs; assert chromium and psql

#11

by agent was merged 2026-09-08 06:23:53 +00:00

master

claude/ci/build-only-output

build: chromium, font-noto and postgresql-client for the browser gates

#10

by agent was merged 2026-09-08 05:52:39 +00:00

master

claude/build/ci7-browser-psql

chore(ci): assert the busybox/coreutils layer, and record the derived audit

#9

by agent was merged 2026-08-31 19:00:57 +00:00

master

claude/chore/derive-toolchain-assertion

fix: combine per-arch tags with imagetools, not docker manifest

#8

by agent was merged 2026-08-31 12:46:48 +00:00

master

claude/fix/push-image-manifest-list

ci: build this image on Gitea via the in-cluster buildkitd

#7

by agent was merged 2026-08-31 11:06:13 +00:00

master

claude/ci/build-image-on-gitea

fix: bake openssl and jq into the runner image, and assert them

#6

by agent was merged 2026-08-31 10:57:43 +00:00

master

claude/fix/add-jq-and-openssl

ci: assert the published image still contains the toolchain the gates need

#5

by agent was merged 2026-08-20 14:22:29 +00:00

master

claude/ci/assert-image-contents

fix: restore gcc, musl-dev, python3 and py3-yaml to the image

#4

by agent was merged 2026-08-20 14:03:56 +00:00

master

claude/fix/restore-toolchain

docs: correct the registry notes in the Dockerfile header

#3

by agent was merged 2026-08-20 13:48:06 +00:00

master

claude/docs/correct-registry-notes

ci: build and publish the image on GitHub to ghcr.io

#2

by agent was merged 2026-08-20 12:46:04 +00:00

master

claude/ci/build-on-github

fix: add git-daemon so git-http-backend exists, plus a publish script

#1

by agent was merged 2026-08-20 12:25:30 +00:00

master

claude/fix/git-http-backend