3 Commits

Include renames

Author	SHA1	Message	Date
mathias	2ba2698ea6	fix(ci): skip build/deploy on the raw template repo itself (template-go-agent#3) ... env.IMAGE: __PROJECT_NAME__ is only substituted with a real, lowercase project name when a repo is *generated* from this template. On the template repo itself it's still the literal placeholder, which buildah/Docker reject outright ("repository name must be lowercase") -- build (and therefore deploy) can never succeed here no matter what else changes. Gate both on github.repository != this template's own path so the template's CI reads green on what it actually validates: the check job (lint/vet/test), the thing every generated repo inherits.	2026-07-24 15:22:04 +02:00
mathias	2c6d1e1149	fix(ci): quote "on" key so Gitea parses workflow triggers ... Bare on: parses as YAML boolean true (Norway problem); Gitea then ignores the triggers and silently skips jobs. Quoting forces the string key.	2026-06-03 08:38:47 +02:00
mathiasandClaude Opus 4.7	b9c64c2694	feat: add agent boundaries, network policy, agent stub, dockerfile, CI ... - AGENT_BOUNDARIES.md: egress allow-list, FS scope, approved/forbidden ops - agent-policy.yaml: k8s NetworkPolicy scoping egress to LiteLLM/brain-mcp/ gitea-mcp/OTLP + default-deny baseline - internal/agent/agent.go: thin ADK runner wrapper (Config + Run) - Dockerfile: distroless multi-stage build, entrypoint cmd/__PROJECT_NAME__ - .gitea/workflows/cd.yml: check → buildah build/push → GitOps deploy Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-28 20:54:04 +02:00