Hiddenden/AegisGitea-MCP
5
0 Fork 0
Code Issues 2 Pull Requests Actions Packages Projects 1 Releases 1 Wiki Activity

feat!: full-access Gitea MCP server (1.0.0): full API coverage, stdio + streamable HTTP, admin and per-user OAuth #71

Merged
Latte merged 70 commits from feat/full-api-coverage into dev 2026-10-14 17:25:25 +00:00
Conversation 0 Commits 70 Files Changed 216
+6 -2
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 84b361962e - Show all commits
docs/deployment.md
+6 -2
View File
@@ -163,5 +163,9 @@ Security rules of the pipeline:
go in `security/trivyignore.txt` with a waiver row in [security.md](security.md). go in `security/trivyignore.txt` with a waiver row in [security.md](security.md).
- `publish.yml` needs the `security` job (secret scan, security tests, dependency audit, bandit - `publish.yml` needs the `security` job (secret scan, security tests, dependency audit, bandit
rules) as well as lint and tests. rules) as well as lint and tests.
- The cleanup script removes containers only for per-run image names (`aegis-ci-<run id>-...`) - The image is built under a per-run local tag (`aegis-ci-<run id>-build:<sha>`), scanned under
and immutable `:sha-` tags. Shared tags (`:latest`, `:main`, `:dev`) are only untagged. that tag, and the registry tags (`:sha-<12>`, `:dev`, `:latest`, `:main`) are applied only
immediately before the push. `build-and-push` needs `lint`, `test-unit`, `test-integration`,
`test-mcp` and `security`, so `:dev` and `:latest` are never pushed while one is red.
- The cleanup script removes containers only for per-run image names (`aegis-ci-<run id>-...`).
Registry tags, the `:sha-` tag included, are only untagged.