approval-service: fix NetworkPolicy ingress to allow Traefik from kube-system (DEV-619)
validate.yml #72 -Commit
a9a53ca31e
pushed by
forgejoadmin
approval-service: fix NetworkPolicy ingress to allow Traefik from kube-system (DEV-619)
phase1-smoke.yml #71 -Commit
a9a53ca31e
pushed by
forgejoadmin
approval-service: fix NetworkPolicy ingress to allow Traefik from kube-system (DEV-619)
build-images.yml #70 -Commit
a9a53ca31e
pushed by
forgejoadmin
approval-service: K8s deployment manifests + Pocket-ID OIDC client (DEV-614)
validate.yml #66 -Commit
20ba29d3ac
pushed by
forgejoadmin
approval-service: K8s deployment manifests + Pocket-ID OIDC client (DEV-614)
phase1-smoke.yml #65 -Commit
20ba29d3ac
pushed by
forgejoadmin
approval-service: K8s deployment manifests + Pocket-ID OIDC client (DEV-614)
build-images.yml #64 -Commit
20ba29d3ac
pushed by
forgejoadmin
deploy: verification-service + dummy-sink Phase-1 manifests (DEV-615)
phase1-smoke.yml #62 -Commit
5d2bf73d84
pushed by
forgejoadmin
deploy: verification-service + dummy-sink Phase-1 manifests (DEV-615)
build-images.yml #61 -Commit
5d2bf73d84
pushed by
forgejoadmin
ci(db): bump migrate-down to 4 + verify verification_decisions (DEV-618)
validate.yml #60 -Commit
5bbd3b2c68
pushed by
forgejoadmin
ci(db): bump migrate-down to 4 + verify verification_decisions (DEV-618)
phase1-smoke.yml #59 -Commit
5bbd3b2c68
pushed by
forgejoadmin
ci(db): bump migrate-down to 4 + verify verification_decisions (DEV-618)
build-images.yml #58 -Commit
5bbd3b2c68
pushed by
forgejoadmin
phase1-smoke: end-to-end harness + Forgejo workflow (DEV-613)
phase1-smoke.yml #56 -Commit
55834438a8
pushed by
forgejoadmin
phase1-smoke: end-to-end harness + Forgejo workflow (DEV-613)
build-images.yml #55 -Commit
55834438a8
pushed by
forgejoadmin
verification-service: Phase-1 two-stage chain verifier (approval -> transform) (DEV-612)
build-images.yml #53 -Commit
0ae29ae342
pushed by
forgejoadmin
dummy-sink: Phase-1 mock sink (sink:dummy-sink) (DEV-611)
validate.yml #52 -Commit
b45ad34169
pushed by
forgejoadmin
dummy-sink: Phase-1 mock sink (sink:dummy-sink) (DEV-611)
build-images.yml #51 -Commit
b45ad34169
pushed by
forgejoadmin
ci(images): pass Harbor secrets as env vars so robot `$` is not expanded (DEV-617)
validate.yml #50 -Commit
d6efabd96f
pushed by
forgejoadmin
ci(images): pass Harbor secrets as env vars so robot `$` is not expanded (DEV-617)
build-images.yml #49 -Commit
d6efabd96f
pushed by
forgejoadmin
ci(images): install docker-buildx so --mount=type=cache works (DEV-617)
validate.yml #46 -Commit
770e71daab
pushed by
forgejoadmin
ci(images): enable BuildKit for signing-service image build
validate.yml #44 -Commit
174a74435a
pushed by
forgejoadmin
ci(db): migrate down above per_diem_rates and verify all four tables
validate.yml #42 -Commit
89da9b0414
pushed by
forgejoadmin
ci: install docker-cli explicitly on debian trixie (DEV-607)
validate.yml #34 -Commit
b99801f0df
pushed by
forgejoadmin
transparency-log: real Trillian backend wiring + agent-trust deploy (DEV-604)
validate.yml #30 -Commit
951f22f80e
pushed by
forgejoadmin
signing-service: Dockerfile, K8s manifests (agent-trust), image CI, secret convention
validate.yml #28 -Commit
b52936ce9d
pushed by
forgejoadmin
signing-service: public pkg/httpapi test surface + admin-api interop test (DEV-599)
validate.yml #26 -Commit
5d338dd725
pushed by
forgejoadmin
admin-api: Pocket-ID session-cookie verifier (OIDC Authorization-Code + PKCE, JWKS, group check)
validate.yml #25 -Commit
9f1eb84032
pushed by
forgejoadmin
services: add transparency-log Go service (ADR-0005 POST /api/v1/log/entries)
validate.yml #24 -Commit
69b3f3012f
pushed by
forgejoadmin
admin-api: Pocket-ID client_credentials TokenSource with OIDC discovery + cache (replaces StaticToken in prod)
validate.yml #22 -Commit
be3ac9cdb8
pushed by
forgejoadmin