# Validate with: sudo visudo -cf /etc/sudoers.d/forgeflow-runner
# Replace "act_runner" with the account that executes your trusted Gitea runner.
# Do not add shell wildcards or other commands.
act_runner ALL=(root) NOPASSWD: /usr/local/bin/forgeflow-deploy