2 Commits

Include renames

Author	SHA1	Message	Date
Latte	766968fa42	ci: pin actions to commit SHAs, guard Docker jobs from forks, scan the image, gate publish on security (SEC-06, SEC-07, SEC-14, SEC-15, SEC-16)	2026-10-14 17:40:16 +02:00
Latte	1a039e32ab	ci: single Gitea Actions pipeline, uv-based image, scoped docker cleanup ... Replace lint/test/docker workflows with ci.yml (gitleaks, lint, test-unit, test-integration, test-mcp, build-and-push, docs-check, security). Rebuild the Dockerfile as a digest-pinned multi-stage uv build running as uid 1000, add .dockerignore, a hardened compose file and a gitleaks config. The integration harness now falls back to /etc/hostname and /proc/self to find its own container.	2026-10-14 15:59:19 +02:00