Commit Graph
8 Commits
Author SHA1 Message Date
ChatGPT MCP 405cf7df9c fix(ci): repair release gate runtime failures
Managed validation / full (pull_request) Successful in 14s
GeoIntel release gates / Trusted workflow source (pull_request) Successful in 3s
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Failing after 1m2s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Successful in 35s
GeoIntel release gates / GIS image, SBOM and container scan (pull_request) Successful in 5m29s
GeoIntel release gates / AI image, SBOM and container scan (pull_request) Failing after 19m14s
2026-08-29 21:16:34 +00:00
ChatGPT MCP 4235da63ea ci: route trusted Docker gates through isolated DinD
GeoIntel release gates / Trusted workflow source (pull_request) Canceled after 0s
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (pull_request) Canceled after 0s
GeoIntel release gates / AI image, SBOM and container scan (pull_request) Canceled after 0s
2026-08-28 18:06:23 +00:00
Jens db5af3cf86 ci: validate change branches via PR instead of every push
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (pull_request) Canceled after 0s
GeoIntel release gates / AI image, SBOM and container scan (pull_request) Canceled after 0s
2026-08-27 00:25:06 +02:00
Jens 55c500ca7b ci: fix Gitea artifact and npm audit handling
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s
2026-08-26 23:56:58 +02:00
Jens 9d8913c134 ci: use nested-runner-safe secret scan
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s
2026-08-26 23:56:33 +02:00
Jens 1fe77f4de4 ci: pin actions and scan both GIS and AI images
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 22s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
GeoIntel release gates / AI image, SBOM and container scan (push) Canceled after 0s
2026-08-26 22:22:41 +02:00
Jens f085891630 fix(security): add secret-scan step to CI (both .gitea and .github variants)
Had a real dependency/container-image Trivy scan but no secret scan.
Adds trufflehog (Marketplace Action) as the first step after checkout
in both the .gitea/workflows/ and .github/workflows/ copies of this
workflow (kept in sync as platform-specific variable-syntax variants of
the same pipeline) - the last gap for this repo to count as
fully-authored.
2026-08-16 14:55:37 +02:00
Codex 027e4b078b Complete RC6 supply chain gates
GeoIntel release gates / Compile, test, contracts and builds (push) Canceled after 0s
GeoIntel release gates / Python and npm vulnerability policy (push) Canceled after 0s
GeoIntel release gates / GIS image, SBOM and container scan (push) Canceled after 0s
2026-07-18 04:15:59 +02:00