fix: enable OIDC for expanded Harbor workflow jobs #6

Merged
karpfen merged 1 commit from fix/harbor-workflow-oidc into main 2026-09-27 10:04:40 +00:00
Owner

Forgejo 16 does not populate the reusable publisher job’s OIDC request endpoint with job-level opt-in alone. Set workflow-level opt-in, following the existing SCA workflow requirement; callers explicitly disable OIDC in image-build jobs. No registry secret is introduced.

Forgejo 16 does not populate the reusable publisher job’s OIDC request endpoint with job-level opt-in alone. Set workflow-level opt-in, following the existing SCA workflow requirement; callers explicitly disable OIDC in image-build jobs. No registry secret is introduced.
fix: enable OIDC for expanded Harbor workflow jobs
All checks were successful
checks / yara-scan (pull_request) Successful in 2s
checks / trivy-scan (pull_request) Successful in 2s
checks / secrets-scan (pull_request) Successful in 2s
checks / secrets (pull_request) Successful in 0s
checks / trivy (pull_request) Successful in 0s
checks / yara (pull_request) Successful in 0s
checks / workflow-syntax (pull_request) Successful in 3s
a46b9b5aaa
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
karpfen/workflows!6
No description provided.