Scan public repositories through Gitea API
All checks were successful
Docker / test-build-push (push) Successful in 36s
All checks were successful
Docker / test-build-push (push) Successful in 36s
This commit is contained in:
@@ -11,6 +11,8 @@ Node 24+, no runtime dependencies. Uses built-in `node:sqlite`. Set `TRACE_PASSW
|
||||
|
||||
Git candidate scanning is optional and disabled by default. If an installation deliberately mounts read-only repository mirrors, list their container paths in `TRACE_REPOS`; production receipt ingestion does not require repository access.
|
||||
|
||||
Production can scan repositories without Git checkouts through Gitea's read-only API. Set `TRACE_GITEA_URL` and a comma-separated `TRACE_GITEA_REPOS` list such as `explewd/flit`. Public repositories require no token; `TRACE_GITEA_TOKEN` is optional for private repositories. A failed repository is skipped rather than failing the inbox.
|
||||
|
||||
Producer onboarding, shared-runner examples, deployment-host responsibilities, and verification are documented in [`docs/INTEGRATING_PROJECTS.md`](docs/INTEGRATING_PROJECTS.md).
|
||||
|
||||
## Deployment receipts v1
|
||||
|
||||
Reference in New Issue
Block a user