core-devops
4659d92695
CI / Adapter unit tests (push) Successful in 40s
CI / Template validation (static) (push) Successful in 1m51s
CI / Adapter unit tests (pull_request) Successful in 31s
CI / Template validation (static) (pull_request) Successful in 1m53s
CI / Template validation (runtime) (push) Successful in 51s
CI / T4 tier-4 conformance (live) (push) Successful in 2m47s
CI / validate (push) Successful in 2s
CI / Template validation (runtime) (pull_request) Successful in 43s
CI / T4 tier-4 conformance (live) (pull_request) Successful in 3m10s
CI / validate (pull_request) Successful in 1s
Adds a hostname-free, vendor-neutral askpass script that reads HTTPS Basic-Auth credentials from env vars (GIT_HTTP_USERNAME / GIT_HTTP_PASSWORD, with GITEA_USER / GITEA_TOKEN as fallback) and emits them on the git credential-prompt protocol. Installed at /usr/local/bin/molecule-askpass so that any deployer who sets GIT_ASKPASS=/usr/local/bin/molecule-askpass on the container env can wire `git` HTTPS auth to those env vars — with no on-disk .gitconfig / .git-credentials mutation needed. Script body contains no hardcoded hostnames and no vendor literals; the deployer scopes the credentials to a specific remote by virtue of choosing when to populate the env vars. This makes the helper safe to ship inside the open-source workspace template image alongside any platform's provisioner. Filename `molecule-askpass` is the only project-specific marker; the script body is identical across all four molecule-ai workspace runtime images (claude-code/molecule-core, codex, hermes, openclaw). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>