mathias/template-go-web
Template
1
0
Fork 0
Code Issues 4 Pull Requests Actions Packages Projects Releases Wiki Activity
16 Commits 5 Branches 3 Tags
fix/guard-survives-substitution
Commit Graph
2 Commits
Author SHA1 Message Date
mathiasandClaude Opus 5 ba4adebd8d ci: re-sync build-image.sh — adds TARGET and BUILD_SECRETS (infra#309)
CD / Detect unsubstituted template (push) Successful in 1s
Details
CD / Lint / Test / Vet (push) Skipped
Details
CD / Build & Import (push) Skipped
Details
CD / Deploy via GitOps (push) Skipped
Details 
Canonical gained two inputs so the repos still to migrate can adopt
without forking the script again: TARGET for multi-stage builds (cad,
agentsquad) and BUILD_SECRETS for buildkit secret mounts (agentsquad).

BUILD_SECRETS takes the SPEC only (`id=NAME,src=PATH`) -- the caller
writes the secret to PATH itself, so no secret value ever reaches this
script's argv or the CI log.

Unused here; this repo's copy just stays byte-identical, which is the
whole point. Written by `task ci:sync`, not by hand.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011PL5XcG68SvQqz3vGVbWbf
 2026-08-25 11:27:06 +02:00
mathias ef4e47bf00 ci: carry the shared build-image script (infra#309)
CD / Detect unsubstituted template (push) Successful in 0s
Details
CD / Lint / Test / Vet (push) Skipped
Details
CD / Build & Import (push) Skipped
Details
CD / Deploy via GitOps (push) Skipped
Details 
Byte-identical copy of mathias/infra's ci-templates/build-image.sh, so
repos generated from this template inherit a managed copy of one file
rather than a private fork of the build logic.
 2026-08-25 08:52:53 +00:00