From c9470d199f9f07bccaa5499b403e678b492abd2e Mon Sep 17 00:00:00 2001 From: Michael Czechowski Date: Thu, 30 Apr 2026 12:17:34 +0200 Subject: [PATCH] ci: digest-pin runner-image v0.1.0 (was :v2) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Drops the ad-hoc :vN tag scheme — see runner-image#semver. Consumers now reference tag + digest so the resolved image is byte-identical across runs. --- .gitea/workflows/ci.yml | 2 +- .gitea/workflows/deploy.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index c98eec1..25024c2 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -12,7 +12,7 @@ jobs: # Bespoke runner image (Ubuntu 24.04 + make + git + node + go via # actions/setup-go). See git.librete.ch/public/runner-image. container: - image: git.librete.ch/public/runner-image:v2 + image: git.librete.ch/public/runner-image:v0.1.0:9d1e204fe8e06b7d16cdc8da0c7077fa4171daef62099cc8c09993834e576ca5 timeout-minutes: 5 steps: - name: Checkout diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml index 934124f..f1e7db9 100644 --- a/.gitea/workflows/deploy.yml +++ b/.gitea/workflows/deploy.yml @@ -34,7 +34,7 @@ jobs: # + perl + ssh, runner user pre-joined to docker gid 998 so the # auto-mounted /var/run/docker.sock is writable without --user root. container: - image: git.librete.ch/public/runner-image:v2 + image: git.librete.ch/public/runner-image:v0.1.0:9d1e204fe8e06b7d16cdc8da0c7077fa4171daef62099cc8c09993834e576ca5 timeout-minutes: 20 if: ${{ vars.DEPLOY_ENABLED == 'true' }} steps: