mroberts/usergen
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
13 Commits 1 Branch 0 Tags
main
Commit Graph
13 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
mroberts a829aa774f Replace Drone CI with SHA-pinned Gitea Actions workflow
build / build and release (push) Has been cancelled
Details 
Ports the build-and-release pipeline from .drone.yml to
.gitea/workflows/release.yaml. Same three amd64 targets, same
release-on-tag trigger.

Actions are pinned to full commit SHAs resolved from gitea.com, the
runner's action resolution host. Its mirror of actions/checkout lags
upstream, so the floating v4 tag there points at a different commit than
github's; only immutable version tags agree across both hosts.

checkout stays on v4 and setup-go on v5 because later majors require a
Node 24 runtime that act_runner images do not generally ship.

Hardening driven by zizmor: workflow-level permissions denied by
default with contents:write scoped to the job that publishes the
release, persist-credentials disabled so the token is not left in
.git/config, and the Go module cache disabled so released binaries
cannot be built from restorable cache state.

Behaviour changes:
- sha1 checksums dropped; gitea-release-action only emits md5 and sha256
- the gitea_public_releases secret is no longer read, as the action
  defaults to the runner-injected repo token
- Go version now comes from go.mod rather than the floating golang image

Also gitignores the usergen build output, which dist/* missed.

Verified: go build, go vet and go test clean; all three cross-compile
targets produce binaries; actionlint and zizmor --offline report no
findings. The release step itself is unverified until a tag is pushed.
 2026-07-20 15:04:52 -05:00
mroberts 2fc52f70ab License format 2024-02-15 21:57:08 +00:00
mroberts bdf6b33a05 Readme tweak 2024-02-15 21:52:26 +00:00
mroberts ba5aa4e5e2 Added a license & readme 2024-02-15 21:51:09 +00:00
mroberts 77d25f2a11 Chagned to verb-noun instead of noun-verb 2024-02-15 21:36:33 +00:00
mroberts b7b4f799e7 Added flag to copy to clipboard 2024-02-15 19:44:25 +00:00
mroberts 1af2cfafa4 Changed to public url 2024-02-15 19:26:06 +00:00
mroberts e93aa0ce5b Trying internal URL 2024-02-15 19:24:47 +00:00
mroberts 8fcda22083 Set create_release to only happen on tags 2024-02-15 19:22:42 +00:00
mroberts f740d758ba Fixed multiple command usage 2024-02-15 19:18:11 +00:00
mroberts b4f5ec23eb Added creating releases 2024-02-15 19:16:34 +00:00
mroberts dca57a3acd Initial CICD attempt 2024-02-15 18:59:07 +00:00
mroberts ea8290a2a2 Initial checkin 2024-02-15 18:55:37 +00:00