fix: 保持镜像发布任务的 SPIFFE 身份兼容 #48

Merged

panxiao81 merged 1 commits from fix/publish-job-identity into main 2026-09-21 17:38:02 +00:00

Conversation 0 Commits 1 Files Changed 2

+2 -2

panxiao81 commented 2026-09-21 17:37:22 +00:00

Owner

Copy Link

Copy Source

controller-only 发布 run 735 使用新 job key 后被 Zot 拒绝。恢复两个独立发布 workflow 的 job key 为既有 publish-images，继续复用当前按 repo/job 授权的 SPIFFE 与 Zot policy；display name 仍区分 controller 和 runner。

验证：yamllint、git diff --check。

controller-only 发布 run 735 使用新 job key 后被 Zot 拒绝。恢复两个独立发布 workflow 的 job key 为既有 `publish-images`，继续复用当前按 repo/job 授权的 SPIFFE 与 Zot policy；display name 仍区分 controller 和 runner。 验证：`yamllint`、`git diff --check`。

panxiao81 added 1 commit 2026-09-21 17:37:22 +00:00

fix(ci): preserve published image job identity 84aa607c86

panxiao81 merged commit a7b62868b6 into main 2026-09-21 17:38:02 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

panxiao81 (Xiao Pan)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: panxiao81/gitea-dynamic-runner#48