From 725d82a8bb57ca4c5b30165c5a856b34e0eb6d36 Mon Sep 17 00:00:00 2001 From: rock Date: Mon, 7 Sep 2026 08:33:25 -0700 Subject: [PATCH 1/4] ci: trigger workflow to build image with org secrets --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 168fc27..005f1c5 100644 --- a/README.md +++ b/README.md @@ -100,3 +100,4 @@ See `config/default.toml` for: See `CLAUDE.md` for project context and constraints. # CI test 1788759975 +# CI trigger 1788795205 -- 2.54.0 From c2b124892217efbdeaf747571935e1fea656bed9 Mon Sep 17 00:00:00 2001 From: rock Date: Mon, 7 Sep 2026 08:37:06 -0700 Subject: [PATCH 2/4] ci: add diagnostic steps to verify registry secrets are accessible --- .gitea/workflows/build.yaml | 27 ++++++++++++++++++++++++++- 1 file changed, 26 insertions(+), 1 deletion(-) diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml index 155976b..e1f66ae 100644 --- a/.gitea/workflows/build.yaml +++ b/.gitea/workflows/build.yaml @@ -49,10 +49,35 @@ jobs: SHORT_SHA=$(git rev-parse --short HEAD) echo "short_sha=${SHORT_SHA}" >> $GITHUB_OUTPUT + - name: Verify registry secrets + run: | + echo "=== Registry Login Diagnostic ===" + if [ -z "${REGISTRY_USER}" ]; then + echo "❌ ERROR: FORGEJO_REGISTRY_USER secret is empty/not set" + exit 1 + fi + if [ -z "${REGISTRY_TOKEN}" ]; then + echo "❌ ERROR: FORGEJO_REGISTRY_TOKEN secret is empty/not set" + exit 1 + fi + echo "✓ REGISTRY_USER is set (length: ${#REGISTRY_USER})" + echo "✓ REGISTRY_TOKEN is set (length: ${#REGISTRY_TOKEN})" + echo "✓ Registry: ${REGISTRY}" + echo "=== Attempting login test ===" + env: + REGISTRY_USER: ${{ secrets.FORGEJO_REGISTRY_USER }} + REGISTRY_TOKEN: ${{ secrets.FORGEJO_REGISTRY_TOKEN }} + - name: Registry login run: | echo "${REGISTRY_TOKEN}" | docker login "${REGISTRY}" \ - --username "${REGISTRY_USER}" --password-stdin + --username "${REGISTRY_USER}" --password-stdin 2>&1 + if [ $? -eq 0 ]; then + echo "✓ Login successful" + else + echo "❌ Login failed" + exit 1 + fi env: REGISTRY_USER: ${{ secrets.FORGEJO_REGISTRY_USER }} REGISTRY_TOKEN: ${{ secrets.FORGEJO_REGISTRY_TOKEN }} -- 2.54.0 From b69244c0b5156a5de20dc1ff5e81151c77bcca93 Mon Sep 17 00:00:00 2001 From: rock Date: Mon, 7 Sep 2026 08:39:06 -0700 Subject: [PATCH 3/4] ci: move secret diagnostic to test job (runs on PRs) --- .gitea/workflows/build.yaml | 49 ++++++++++++++++++------------------- 1 file changed, 24 insertions(+), 25 deletions(-) diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml index e1f66ae..4470ce5 100644 --- a/.gitea/workflows/build.yaml +++ b/.gitea/workflows/build.yaml @@ -23,6 +23,25 @@ jobs: - name: Checkout code uses: actions/checkout@v4 + - name: Verify registry secrets + run: | + echo "=== Registry Login Diagnostic ===" + if [ -z "${REGISTRY_USER}" ]; then + echo "❌ ERROR: FORGEJO_REGISTRY_USER secret is empty/not set" + exit 1 + fi + if [ -z "${REGISTRY_TOKEN}" ]; then + echo "❌ ERROR: FORGEJO_REGISTRY_TOKEN secret is empty/not set" + exit 1 + fi + echo "✓ REGISTRY_USER is set (length: ${#REGISTRY_USER})" + echo "✓ REGISTRY_TOKEN is set (length: ${#REGISTRY_TOKEN})" + echo "✓ Registry: ${REGISTRY}" + echo "=== Secrets verified successfully ===" + env: + REGISTRY_USER: ${{ secrets.FORGEJO_REGISTRY_USER }} + REGISTRY_TOKEN: ${{ secrets.FORGEJO_REGISTRY_TOKEN }} + - name: Cargo test run: cargo test -p mem-ingest --lib 2>&1 | tail -50 || true @@ -49,35 +68,15 @@ jobs: SHORT_SHA=$(git rev-parse --short HEAD) echo "short_sha=${SHORT_SHA}" >> $GITHUB_OUTPUT - - name: Verify registry secrets - run: | - echo "=== Registry Login Diagnostic ===" - if [ -z "${REGISTRY_USER}" ]; then - echo "❌ ERROR: FORGEJO_REGISTRY_USER secret is empty/not set" - exit 1 - fi - if [ -z "${REGISTRY_TOKEN}" ]; then - echo "❌ ERROR: FORGEJO_REGISTRY_TOKEN secret is empty/not set" - exit 1 - fi - echo "✓ REGISTRY_USER is set (length: ${#REGISTRY_USER})" - echo "✓ REGISTRY_TOKEN is set (length: ${#REGISTRY_TOKEN})" - echo "✓ Registry: ${REGISTRY}" - echo "=== Attempting login test ===" - env: - REGISTRY_USER: ${{ secrets.FORGEJO_REGISTRY_USER }} - REGISTRY_TOKEN: ${{ secrets.FORGEJO_REGISTRY_TOKEN }} - - name: Registry login run: | + echo "✓ Attempting login to ${REGISTRY}..." echo "${REGISTRY_TOKEN}" | docker login "${REGISTRY}" \ - --username "${REGISTRY_USER}" --password-stdin 2>&1 - if [ $? -eq 0 ]; then - echo "✓ Login successful" - else - echo "❌ Login failed" + --username "${REGISTRY_USER}" --password-stdin 2>&1 || { + echo "❌ Login failed - secrets may be empty or invalid" exit 1 - fi + } + echo "✓ Login successful" env: REGISTRY_USER: ${{ secrets.FORGEJO_REGISTRY_USER }} REGISTRY_TOKEN: ${{ secrets.FORGEJO_REGISTRY_TOKEN }} -- 2.54.0 From 762ad63e95d29282e02d2b43ee6b99085c865dc5 Mon Sep 17 00:00:00 2001 From: rock Date: Mon, 7 Sep 2026 08:55:24 -0700 Subject: [PATCH 4/4] ci: remove diagnostic verification step - secrets now configured --- .gitea/workflows/build.yaml | 26 +------------------------- 1 file changed, 1 insertion(+), 25 deletions(-) diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml index 4470ce5..155976b 100644 --- a/.gitea/workflows/build.yaml +++ b/.gitea/workflows/build.yaml @@ -23,25 +23,6 @@ jobs: - name: Checkout code uses: actions/checkout@v4 - - name: Verify registry secrets - run: | - echo "=== Registry Login Diagnostic ===" - if [ -z "${REGISTRY_USER}" ]; then - echo "❌ ERROR: FORGEJO_REGISTRY_USER secret is empty/not set" - exit 1 - fi - if [ -z "${REGISTRY_TOKEN}" ]; then - echo "❌ ERROR: FORGEJO_REGISTRY_TOKEN secret is empty/not set" - exit 1 - fi - echo "✓ REGISTRY_USER is set (length: ${#REGISTRY_USER})" - echo "✓ REGISTRY_TOKEN is set (length: ${#REGISTRY_TOKEN})" - echo "✓ Registry: ${REGISTRY}" - echo "=== Secrets verified successfully ===" - env: - REGISTRY_USER: ${{ secrets.FORGEJO_REGISTRY_USER }} - REGISTRY_TOKEN: ${{ secrets.FORGEJO_REGISTRY_TOKEN }} - - name: Cargo test run: cargo test -p mem-ingest --lib 2>&1 | tail -50 || true @@ -70,13 +51,8 @@ jobs: - name: Registry login run: | - echo "✓ Attempting login to ${REGISTRY}..." echo "${REGISTRY_TOKEN}" | docker login "${REGISTRY}" \ - --username "${REGISTRY_USER}" --password-stdin 2>&1 || { - echo "❌ Login failed - secrets may be empty or invalid" - exit 1 - } - echo "✓ Login successful" + --username "${REGISTRY_USER}" --password-stdin env: REGISTRY_USER: ${{ secrets.FORGEJO_REGISTRY_USER }} REGISTRY_TOKEN: ${{ secrets.FORGEJO_REGISTRY_TOKEN }} -- 2.54.0