Files
MarioGLealPandClaude Opus 5.5 29d08d2ba1
ci / checks (pull_request) Successful in 29s
ci / build (pull_request) Successful in 8s
ci / checks (push) Successful in 28s
ci / build (push) Successful in 49s
ci: checks and image build on Sindri
- .gitea/workflows/ci.yaml: `checks` (the whole of scripts/check.sh in a
  credential-free pod, Postgres 16.15 as a service container) then
  `build` (rootless BuildKit; main also pushes to Zot and signs).
- scripts/tools.py: vacuum and oasdiff as sha256-pinned release binaries,
  the same locally and in CI (Sindri has no podman); check.sh uses them.
- tests fail instead of skipping in CI when there's no database.
- Dockerfile: dependencies layer first, the app non-editable, migrations
  + alembic config in the image, uid 10001, no .pyc (read-only root).
- test-db.sh pins Postgres 16.15 by digest (what CNPG runs).

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01MdS1Hfahkh27nfbtRVZ4CR
2026-10-29 14:46:01 +00:00

8 lines
73 B
Plaintext

.venv/
__pycache__/
.pytest_cache/
.ruff_cache/
*.egg-info/
.env
.tools/