compliance-scanner-agent

6 Commits

Author	SHA1	Message	Date
Sharang ParnerkarandClaude Fable 5	3f5ebc4afd	fix(ci): authenticate tramiton-core fetch in the agent image build (main deploys) CI / Check (pull_request) Successful in 5m44s Details CI / Detect Changes (pull_request) Has been skipped Details CI / Deploy Agent (pull_request) Has been skipped Details CI / Deploy Dashboard (pull_request) Has been skipped Details CI / Deploy Docs (pull_request) Has been skipped Details CI / Deploy MCP (pull_request) Has been skipped Details The PR `check` job configures git auth for the private tramiton-core dependency, but the main-branch `deploy-agent` job builds `Dockerfile.agent` where cargo also fetches tramiton-core — inside the image build, with no credentials — so agent image builds on main failed. Inject the PAT as a BuildKit secret (never baked into a layer): - Dockerfile.agent: `RUN --mount=type=secret,id=tramiton_token` configures the same https-insteadOf rewrite + CARGO_NET_GIT_FETCH_WITH_CLI before cargo build. - deploy-agent: `DOCKER_BUILDKIT=1 docker build --secret id=tramiton_token,env= TRAMITON_FETCH_TOKEN ...`, reusing the existing TRAMITON_FETCH_TOKEN secret. Only the agent image depends on tramiton-core; dashboard/mcp/docs builds are unaffected. Self-tests on merge (deploy-agent runs when Dockerfile.agent changes). Refs #118. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-12 22:18:44 +02:00
Sharang Parnerkar	5cafd13f44	ci: log orca webhook response so deploy steps arent silent CI / Deploy Agent (push) Has been skipped Details CI / Deploy Dashboard (push) Has been skipped Details CI / Deploy Docs (push) Has been skipped Details CI / Deploy MCP (push) Has been skipped Details CI / Check (push) Has been skipped Details CI / Detect Changes (push) Successful in 5s Details Nightly E2E Tests / E2E Tests (push) Failing after 2m59s Details	2026-04-08 15:09:27 +02:00
Sharang ParnerkarandClaude Opus 4.6	69209649a5	ci: trigger first orca build for all services CI / Check (push) Has been skipped Details CI / Deploy Agent (push) Successful in 7m5s Details CI / Deploy Dashboard (push) Failing after 21m28s Details CI / Detect Changes (push) Successful in 4s Details CI / Deploy Docs (push) Successful in 30s Details CI / Deploy MCP (push) Successful in 1m31s Details Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:10:07 +02:00
Sharang ParnerkarandClaude Opus 4.6	d5439adc0d	ci: trigger build of dashboard, docs, mcp images for orca CI / Check (push) Has been cancelled Details CI / Detect Changes (push) Has been cancelled Details CI / Deploy Agent (push) Has been cancelled Details CI / Deploy Dashboard (push) Has been cancelled Details CI / Deploy Docs (push) Has been cancelled Details CI / Deploy MCP (push) Has been cancelled Details Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:09:49 +02:00
Sharang ParnerkarandClaude Opus 4.6	bc7cdd35e4	ci: replace coolify webhook with orca deploy CI / Check (push) Has been cancelled Details CI / Detect Changes (push) Has been cancelled Details CI / Deploy Agent (push) Has been cancelled Details CI / Deploy Dashboard (push) Has been cancelled Details CI / Deploy Docs (push) Has been cancelled Details CI / Deploy MCP (push) Has been cancelled Details Each deploy job now builds the per-service image, pushes to the private registry as :latest and :sha, then triggers an HMAC-signed orca redeploy webhook. Coolify webhooks are no longer used. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:06:11 +02:00
Sharang ParnerkarandClaude Opus 4.6	c062d834a1	fix: downgrade dotenv missing file from FAILED to info message CI / Check (push) Has been skipped Details CI / Detect Changes (push) Successful in 3s Details CI / Deploy Agent (push) Successful in 2s Details CI / Deploy Dashboard (push) Has been skipped Details CI / Deploy Docs (push) Has been skipped Details CI / Deploy MCP (push) Has been skipped Details Nightly E2E Tests / E2E Tests (push) Failing after 2m16s Details Non-fatal in Docker where env vars come from container config. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-30 15:33:24 +02:00