FORGE-WP-ADHOC-2026-10-27: admit the filename-digest receive scanner
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

The Forgejo template and init guard now include the 20261027 adapter beside the two older admitted binaries.

Assistant: grok
Assistant-Model: grok-4.7
Assistant-Session: 01a17f2b-8cc3-76f0-9bce-3b3444b9a5e9
This commit is contained in:
tegwick 2026-10-27 22:45:21 +01:00
parent 0a1aba9d62
commit bf77257d52
2 changed files with 7 additions and 14 deletions

File diff suppressed because one or more lines are too long

View file

@ -1,20 +1,16 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: forgejo-secret-template-832f6dc6b809
name: forgejo-secret-template-d1df801be39f
namespace: forgejo
labels:
app.kubernetes.io/part-of: forgejo
custodian.coulomb.social/workplan: FORGE-WP-0010
custodian.coulomb.social/workplan: FORGE-WP-ADHOC-2026-10-27
immutable: true
data:
hook: '#!/bin/sh
hook: |
#!/bin/sh
set +vx
set -eu
exec /data/security/receive-secret-scan/20261027-b735d052a49f/receive-secret-scan --scanner /data/security/receive-secret-scan/20261027-b735d052a49f/gitleaks
exec /data/security/receive-secret-scan/20261018-73ee04078786/receive-secret-scan
--scanner /data/security/receive-secret-scan/20261018-73ee04078786/gitleaks
'