Homelab/workflows
Homelab/workflows
Watch
5
0
Fork
You've already forked workflows
 0
Code Issues 7 Pull requests Projects Releases 95 Packages Wiki Activity Actions
95 releases 129 tags
  • v1.3.5 13d4ebaab5

    v1.3.5
    All checks were successful
    Repository security / security-1 (push) Successful in 1m21s
    Details
    Repository security / security (push) Successful in 0s
    Details
    Library checks / tests (push) Successful in 1m58s
    Details
    Stable

    gitchegumi released this 2026-09-07 15:46:35 -05:00 | 273 commits to main since this release

    Fixes private Forgejo release downloads that failed with HTTP 404 when using the automatic Actions token.

    • Use a dedicated RELEASE_READ_TOKEN for attachment downloads.
    • Keep the automatic token for release metadata and deployment authorization checks.
    • Report missing or invalid download credentials clearly.
    • Add a download-only probe that requires no cluster credentials.
    • Preserve signature, checksum, provenance, mitigation-expiry and scan verification.

    Required configuration: Store a repository-read token as RELEASE_READ_TOKEN and explicitly forward it from each app’s deployment workflow. An organization secret can serve multiple approved app repositories.

    Validation: All hosted checks passed, including 73 unit tests and 16 scaffold cases. A live download of Actual Budget’s private app.json succeeded.

    Existing signed bundles remain compatible; no rebuild is required.

    Downloads