mathias/gitea-mcp

Fork 0

T

mathiasandClaude Opus 5 e4d07c106c

CD / Lint / Test / Vet (push) Successful in 10s

Details

CD / Build & Import (push) Successful in 7s

Details

CD / Deploy via GitOps (push) Successful in 9s

Details

ci(deploy): refuse to patch a manifest with an empty IMAGE_TAG (infra#311)

On 2026-08-25 a deploy job ran with an empty IMAGE_TAG, wrote
`image: localhost:5000/gitea-mcp:` into the infra repo and pushed it.
That is invalid YAML, so Flux failed the ENTIRE apps Kustomization --
every app stopped reconciling for about an hour, including three
unrelated deploys queued behind it.

This job's existing check could not catch it. It greps for
`image: <repo>:${IMAGE_TAG}` after the sed, and with IMAGE_TAG empty that
pattern matches the corrupted line itself, so the verification passes
because of the bug rather than despite it.

Asserting the input up front is the fix: an empty tag now fails the job
before anything is written, let alone committed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011PL5XcG68SvQqz3vGVbWbf

2026-08-25 17:25:23 +02:00

.context

chore(context): re-sync adapters from root AGENT.md (skills → mathias/skills repo)

2026-07-04 00:39:35 +02:00

.gitea

ci(deploy): refuse to patch a manifest with an empty IMAGE_TAG (infra#311)

2026-08-25 17:25:23 +02:00

.githooks

chore: adopt trunk-based development

2026-05-17 09:44:52 +02:00

.skills

feat(auth): JWT-or-static middleware + /.well-known/oauth-protected-resource (issue #5 )

2026-05-12 11:30:52 +02:00

cmd/gitea-mcp

feat(auth): per-caller Gitea PAT pass-through (#59 )

2026-07-22 08:22:50 +02:00

docs

ci(cd): skip docs-only pushes; move HOW_GITEA_MCP_WORKS into docs/

2026-07-07 00:43:46 +02:00

internal

fix(auth): owner allowlist trusts pass-through-authenticated callers (#59 )

2026-07-22 08:31:43 +02:00

scripts

feat(auth): JWT-or-static middleware + /.well-known/oauth-protected-resource (issue #5 )

2026-05-12 11:30:52 +02:00

.aider.conf.yml

feat(auth): JWT-or-static middleware + /.well-known/oauth-protected-resource (issue #5 )

2026-05-12 11:30:52 +02:00

.aider.conventions.md

chore(context): re-sync adapters from root AGENT.md (skills → mathias/skills repo)

2026-07-04 00:39:35 +02:00

.cursorrules

chore(context): re-sync adapters from root AGENT.md (skills → mathias/skills repo)

2026-07-04 00:39:35 +02:00

.gitignore

feat: initial scaffold with /healthz

2026-05-04 20:13:41 +02:00

AGENTS.md

chore(context): re-sync adapters from root AGENT.md (skills → mathias/skills repo)

2026-07-04 00:39:35 +02:00

CLAUDE.md

chore(housekeeping): canonical git.d-ma.be host + honest version string

2026-07-03 23:58:34 +02:00

Dockerfile

build(version): inject real build version via ldflags (#47 )

2026-07-04 08:28:05 +02:00

go.mod

feat(auth): trust the k8s cluster OIDC issuer for ServiceAccount tokens (ADR-0011 D1)

2026-07-07 00:16:39 +02:00

go.sum

feat(auth): trust the k8s cluster OIDC issuer for ServiceAccount tokens (ADR-0011 D1)

2026-07-07 00:16:39 +02:00

README.md

chore: adopt trunk-based development

2026-05-17 09:44:52 +02:00

Taskfile.yml

chore: adopt trunk-based development

2026-05-17 09:44:52 +02:00

README.md

gitea-mcp

Streamable HTTP MCP service exposing Gitea repo operations to Claude apps. See ~/dev/AI/infra/docs/superpowers/specs/2026-05-04-gitea-mcp-gitops-workflow-design.md.

Quickstart

task setup:hooks   # installs .githooks/pre-push — runs task check before every push
task check         # context sync + lint + test + vet
task build         # produces bin/gitea-mcp

This repo uses Trunk-Based Development. Commit directly to main. The pre-push hook enforces the quality gate locally; CI re-runs task check on every push.