sean/platform-seanfarm
Watch
1
0
Fork
You've already forked platform-seanfarm
 0
Code Issues Pull requests 10 Projects Releases 120 Packages Wiki Activity
120 releases 120 tags
  • v0.1.18 18a45ee8f1

    v0.1.18 Stable

    pipeline-bot released this 2026-07-10 13:57:47 +00:00 | 426 commits to main since this release

    • Forgejo instance signing (SSH ed25519), key in OpenBao KV. Max-security Phase 3a. A keygen
      Job (scoped OpenBaoPolicy + k8s-auth role) generates an ed25519 SSH signing key into OpenBao
      kv (cas=0 generate-once) and materializes it as the forgejo-signing-key Secret; a
      copy-signing-key initContainer places a 0600 copy on /data (the raw key never mounts in the
      main container). [repository.signing] FORMAT=ssh MERGES=always DEFAULT_TRUST_MODEL=committer
      so server-side merges/squashes are signed+verified. Behavior-neutral until requireSignedCommits
      (Phase 3c). Append-only composition edit (env/volume/initContainer indices unshifted).

    Included changes (v0.1.17 -> v0.1.18)

    • 86bc37b0ad2f feat(forgejo): SSH-ed25519 instance signing, key in OpenBao KV (max-security 3a)
    Downloads