Sharang ParnerkarandClaude Fable 5
3f5ebc4afd
CI / Check (pull_request) Successful in 5m44s
CI / Detect Changes (pull_request) Has been skipped
CI / Deploy Agent (pull_request) Has been skipped
CI / Deploy Dashboard (pull_request) Has been skipped
CI / Deploy Docs (pull_request) Has been skipped
CI / Deploy MCP (pull_request) Has been skipped
The PR `check` job configures git auth for the private tramiton-core dependency, but the main-branch `deploy-agent` job builds `Dockerfile.agent` where cargo also fetches tramiton-core — inside the image build, with no credentials — so agent image builds on main failed. Inject the PAT as a BuildKit secret (never baked into a layer): - Dockerfile.agent: `RUN --mount=type=secret,id=tramiton_token` configures the same https-insteadOf rewrite + CARGO_NET_GIT_FETCH_WITH_CLI before cargo build. - deploy-agent: `DOCKER_BUILDKIT=1 docker build --secret id=tramiton_token,env= TRAMITON_FETCH_TOKEN ...`, reusing the existing TRAMITON_FETCH_TOKEN secret. Only the agent image depends on tramiton-core; dashboard/mcp/docs builds are unaffected. Self-tests on merge (deploy-agent runs when Dockerfile.agent changes). Refs #118. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>