- .gitea/workflows/ci.yaml: `checks` (the whole of scripts/check.sh in a credential-free pod, Postgres 16.15 as a service container) then `build` (rootless BuildKit; main also pushes to Zot and signs). - scripts/tools.py: vacuum and oasdiff as sha256-pinned release binaries, the same locally and in CI (Sindri has no podman); check.sh uses them. - tests fail instead of skipping in CI when there's no database. - Dockerfile: dependencies layer first, the app non-editable, migrations + alembic config in the image, uid 10001, no .pyc (read-only root). - test-db.sh pins Postgres 16.15 by digest (what CNPG runs). Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01MdS1Hfahkh27nfbtRVZ4CR
8 lines
73 B
Plaintext
8 lines
73 B
Plaintext
.venv/
|
|
__pycache__/
|
|
.pytest_cache/
|
|
.ruff_cache/
|
|
*.egg-info/
|
|
.env
|
|
.tools/
|