All Workflows cve-triage gate images merge-gate renovate

Management

Job queue

546 workflow runs

Actor

All actors gitea-admin jakman85 pm-agent renovate-bot

Status

All status Success Failure Canceled Skipped Waiting Running Blocked Canceling

Branch

All branches bugfix/arr-to-plex chore/adopt-spec-sync chore/cilium-split-merge2 chore/decisions-log-conflict-free chore/pm-agent-digest-99 chore/pm-agent-go-live chore/pm-agent-runner-digest chore/renovate-config-cleanup chore/rotate-cloudflared-tunnel docs/agents-work-in-their-own-workspace docs/ci-delivery-flow-for-agents docs/ci-reality-vs-phase-0 docs/close-out-ci-hardening docs/handoff-2026-09-29 docs/memattr-6-12-backport docs/node2-memory-refine docs/oauth2-sidecar-scrape-verified docs/phase-7-open-prod-node-1 docs/pihole-ha-verified docs/pm-agent-registry-pull-prereq docs/poststart-incident docs/reconcile-with-reality docs/runbooks-pr-flow docs/source-comment-audit feat/automated-upgrades feat/ci-is-the-approver feat/cilium-own-kustomization feat/cilium-roll-out-on-config-change feat/cloudflare-tunnel feat/conformance-job-template feat/conformance-run-ledger feat/conformance-runner-image feat/conformance-trigger-admission-boundary feat/conformance-trigger-kubeconfig feat/devcontainer-velero-cli feat/dns-via-cloudflare-tunnel feat/flux-deploy-notifications feat/gate-toolbox-container feat/gitea-28 feat/gitea-settings-drift-check feat/graceful-cluster-shutdown feat/hubble-flow-export-plex feat/image-pipeline feat/intel-gpu-device-plugin feat/keycloak-passkey-reconcile feat/keycloak-passkeys feat/l0-externaldns-annotation-prefix feat/ledger-section-parsing feat/node-health-render-device feat/oauth2-proxy-api-route-per-app feat/oauth2-proxy-auth-failure-visible feat/parallel-l0-checks feat/pihole-declare-state feat/pihole-explicit-lan-names feat/pihole-multi-replica feat/pin-pihole-jackett-plex feat/plex-claim-sops-secret feat/plex-claim-token-013124 feat/plex-quicksync feat/plex-remote-access-l4 feat/plex-vip-hostname-and-lan-networks feat/pm-agent-issue-to-pr feat/pm-agent-pr-mentions feat/pm-agent-registry-pull-secret feat/prod-hardening feat/prod-memattr-and-nodes feat/prod-node-2 feat/public-dns-wan-target feat/quicksync-via-device-plugin feat/r-state-03-proven feat/renovate-track-keycloak-operator feat/runner-capacity-2 feat/sd-hardware-capability feat/vpn-remote-access-wireguard feat/vuln-visibility feature/add-private-key-for-wireguard feature/cloudflare-tunnel-config feature/pm-agent-credentials fix/admin-approval-override fix/bulk-nfs-truenas fix/cilium-cgroup-hostroot fix/cloudflared-creds-permission fix/cluster-available-would-fake-a-green fix/conformance-context-is-fail-open fix/coredns-ha fix/crafty-bedrock-19132 fix/crafty-oauth2-proxy-signin fix/dind-native-sidecar fix/flux-deploy-notification-inhibited fix/gate-push-trigger-matches-feat-prefix fix/gitea-admins-could-override-the-gate fix/gitea-admit-buildkit fix/gitea-settings-comment-names-impossible-secret fix/ha-check-catastrophic-regex fix/jackett-oauth2-proxy-session fix/keycloak-operator-crds fix/keycloak-servicemonitor-owner fix/kyverno-policy-was-never-applied fix/new-peer-ignores-template-comments fix/node-keycloak-hosts-pin fix/oauth2-proxy-cookie-collision-fleet fix/oauth2-proxy-oidc-startup-race fix/oauth2-sidecar-metrics-scrape-netpol fix/peers-configmap-content-hash fix/pihole-local-ttl fix/plex-advertise-plexdirect fix/plex-quicksync-verification fix/plex-resolver-independent-advertise fix/plex-unblock-app-tier fix/pm-agent-triage-exit fix/poststart-exit-status fix/public-dns-wan-a-record fix/render-selftest-runs-in-gate fix/renovate-auth fix/renovate-config-filename fix/renovate-cron-window fix/renovate-first-run fix/renovate-hold-auth-and-self fix/renovate-invalid-config fix/renovate-run-hygiene fix/secret-name-and-require-gitea-settings fix/strict-postbuild-substitutions fix/unattended-upgrades-debian-sentinel fix/vpn-ingress-ip-forward fix/vpn-ingress-l2-lease-collision fix/vpn-runbook-ansible-command fix/vpn-server-key-in-sops fix/wg-client-mtu-docs fix/wg-home-peer-pihole-sources main migration/dns-apex-inversion plex/volume-expamsion prod/deliver-fixes renovate/ghcr.io-renovatebot-renovate-44.x renovate/gitea.home.keithjackson.dev-home-network-toolbox-main renovate/kube-prometheus-stack-93.x rescued/fix/act-runner-dind-readiness rescued/fix/node-dns-resilient-upstream sync-39-onto-main vpn/add-keith-phone

feat(conformance): build the runner image the in-cluster Job could never have run

gate #126:Commit 526a38d137 pushed by gitea-admin

#18

2026-09-30 00:14:01 +00:00

1m40s

View workflow file

feat(ci): the pipeline is the approver; humans approve changes to the pipeline

gate #125:Commit 0c6949ed98 pushed by gitea-admin

#17

2026-09-30 04:42:18 +00:00

3m17s

View workflow file

Merge pull request 'fix(sec): the R-SEC-02 admission policy was never applied' (#16) from fix/kyverno-policy-was-never-applied into main

gate #124:Commit 20ea70d221 pushed by jakman85

main

2026-09-29 18:30:37 +00:00

1m41s

View workflow file

fix(sec): the R-SEC-02 admission policy was never applied -- and nothing could tell

gate #123:Commit 8c7a770de2 pushed by gitea-admin

#16

2026-09-29 18:26:22 +00:00

1m40s

View workflow file

Merge pull request 'docs(decisions-log): end-of-session PM handoff' (#14) from docs/handoff-2026-09-29 into main

gate #122:Commit 1c5974013e pushed by jakman85

main

2026-09-29 18:18:00 +00:00

1m36s

View workflow file

Merge pull request 'feat(sec): constrain the conformance CI trigger at admission' (#13) from feat/conformance-trigger-admission-boundary into main

gate #121:Commit 4791d4a43a pushed by jakman85

main

2026-09-29 18:16:23 +00:00

20s

View workflow file

Merge pull request 'fix(ci): CLUSTER_AVAILABLE=true would have faked a green' (#12) from fix/cluster-available-would-fake-a-green into main

gate #120:Commit dfd608ac32 pushed by jakman85

main

2026-09-29 18:16:01 +00:00

1m3s

View workflow file

Merge pull request 'fix(ci): the settings token could never have been stored' (#15) from fix/secret-name-and-require-gitea-settings into main

gate #119:Commit 1d2d9d6549 pushed by jakman85

main

2026-09-29 18:14:56 +00:00

23s

View workflow file

docs(decisions-log): addendum — detector armed, and why an agent cannot merge here

gate #118:Commit 4b31f97486 pushed by gitea-admin

#14

2026-09-29 17:15:27 +00:00

1m37s

View workflow file

fix(ci): the settings token could NEVER have been stored -- Gitea reserves the GITEA_ prefix

gate #117:Commit 50a48e6f07 pushed by gitea-admin

#15

2026-09-29 17:11:25 +00:00

1m39s

View workflow file

docs(decisions-log): end-of-session PM handoff — six PRs open, and what a new machine needs

gate #116:Commit 911ead5fbd pushed by gitea-admin

#14

2026-09-29 08:31:44 +00:00

1m36s

View workflow file

docs(decisions-log): end-of-session PM handoff — six PRs open, and what a new machine needs

gate #115:Commit 911ead5fbd pushed by gitea-admin

#14

2026-09-29 08:31:42 +00:00

3m8s

View workflow file

feat(sec): constrain the conformance CI trigger at admission (R-SEC-02)

gate #114:Commit 8eb5baffa4 pushed by gitea-admin

#13

2026-09-29 08:25:59 +00:00

1m41s

View workflow file

fix(ci): CLUSTER_AVAILABLE=true would have FAKED A GREEN over 54 skipped tests

gate #113:Commit 6586919132 pushed by gitea-admin

#12

2026-09-29 16:25:33 +00:00

3m17s

View workflow file

Merge pull request 'feat(ci): detect Gitea settings drift' (#11) from feat/gitea-settings-drift-check into main

gate #112:Commit 4634b44cc7 pushed by jakman85

main

2026-09-29 08:02:43 +00:00

3m11s

View workflow file

feat(ci): detect Gitea settings drift -- the blind spot that hid a month of outage

gate #111:Commit e6f6e4febb pushed by gitea-admin

#11

2026-09-29 07:57:21 +00:00

1m37s

View workflow file

Merge pull request 'fix(gitea): admins could override the gate' (#10) from fix/gitea-admins-could-override-the-gate into main

gate #110:Commit e8e6b9c681 pushed by jakman85

main

2026-09-29 07:45:32 +00:00

1m37s

View workflow file

fix(gitea): admins could override the gate -- the enforcement was not enforcing

gate #109:Commit fcc66c7858 pushed by gitea-admin

#10

2026-09-29 07:39:50 +00:00

1m37s

View workflow file

Merge pull request 'docs(ci): close out the hardening; correct a claim that shipped wrong' (#9) from docs/close-out-ci-hardening into main

gate #108:Commit b9e8a4f9e8 pushed by jakman85

main

2026-09-29 07:34:31 +00:00

1m37s

View workflow file

docs(ci): close out the hardening -- land the scripts, correct a claim that shipped wrong

gate #107:Commit b2d9883958 pushed by gitea-admin

#9

2026-09-29 07:32:37 +00:00

2m5s

View workflow file

Merge pull request 'fix(ci): convert dind to a native sidecar; delete both wait loops' (#7) from fix/dind-native-sidecar into main

gate #106:Commit 00efd4b828 pushed by jakman85

main

2026-09-29 07:24:29 +00:00

1m36s

View workflow file

Merge pull request 'fix(ci): delete the per-branch push triggers instead of adding feat/**' (#6) from fix/gate-push-trigger-matches-feat-prefix into main

gate #105:Commit 67a54a33a4 pushed by jakman85

main

2026-09-29 07:22:51 +00:00

27s

View workflow file

Merge pull request 'docs(runbooks): the PR flow, not git push origin main' (#5) from docs/runbooks-pr-flow into main

gate #104:Commit db1a623073 pushed by jakman85

main

2026-09-29 07:22:22 +00:00

52s

View workflow file

Merge pull request 'docs: correct CI/platform documentation that was stale or wrong' (#8) from docs/ci-reality-vs-phase-0 into main

gate #103:Commit ce271225de pushed by jakman85

main

2026-09-29 07:21:29 +00:00

39s

View workflow file

docs: correct CI/platform documentation that was stale, wrong, or load-bearing

gate #102:Commit e72050c690 pushed by gitea-admin

#8

2026-09-29 07:19:04 +00:00

1m39s

View workflow file

docs: correct CI/platform documentation that was stale, wrong, or load-bearing

gate #101:Commit e72050c690 pushed by gitea-admin

docs/ci-reality-vs-phase-0

2026-09-29 07:19:02 +00:00

3m14s

View workflow file

docs(runbooks): two more uncited "4-minute" claims the first pass missed

gate #100:Commit 761e25cc3f pushed by gitea-admin

#5

2026-09-29 07:04:04 +00:00

1m41s

View workflow file

docs(runbooks): two more uncited "4-minute" claims the first pass missed

gate #99:Commit 761e25cc3f pushed by gitea-admin

docs/runbooks-pr-flow

2026-09-29 07:04:02 +00:00

3m13s

View workflow file

fix(ci): convert dind to a native sidecar; delete both hand-rolled wait loops

gate #98:Commit e7508931ca pushed by gitea-admin

#7

2026-09-29 07:04:00 +00:00

4m49s

View workflow file

fix(ci): delete the per-branch push triggers instead of adding feat/** to them

gate #97:Commit bf98a99af6 pushed by gitea-admin

#6

2026-09-29 07:03:58 +00:00

6m21s

View workflow file