Publish repository images through isolated Harbor workers #5

Merged
karpfen merged 2 commits from feat/harbor-publication into main 2026-09-27 09:41:56 +00:00
Owner

Provide one reusable artifact-to-Harbor workflow. It uses Forgejo Actions OIDC and the built-in job token for server-side branch-protection verification; no manually configured registry secrets are needed. Native credentials stay in the exchange and publishing pods are disposable.

Provide one reusable artifact-to-Harbor workflow. It uses Forgejo Actions OIDC and the built-in job token for server-side branch-protection verification; no manually configured registry secrets are needed. Native credentials stay in the exchange and publishing pods are disposable.
Verify branch protection using the built-in job credential
All checks were successful
checks / trivy-scan (pull_request) Successful in 2s
checks / yara-scan (pull_request) Successful in 1s
checks / secrets-scan (pull_request) Successful in 2s
checks / secrets (pull_request) Successful in 0s
checks / trivy (pull_request) Successful in 0s
checks / yara (pull_request) Successful in 0s
checks / workflow-syntax (pull_request) Successful in 6s
788d801d96
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
karpfen/workflows!5
No description provided.