fix(ci): port publish-workspace-server-image.yml from .github/ to .gitea/workflows/ (issue #228) #237

core-be · 2026-05-10T04:11:38Z

core-be commented

2026-05-10 04:11:38 +00:00

Summary

Port publish-workspace-server-image.yml from .github/workflows/ to .gitea/workflows/. Since the GitHub org suspension (2026-05-06), the GitHub Actions workflow is dormant — Gitea Actions reads .gitea/workflows/ only. Impact: Dockerfile.tenant changes (e.g. PR #223 chown fix) no longer trigger platform image rebuilds, so new tenants get the broken pre-#223 image.

What changed


New file	`.gitea/workflows/publish-workspace-server-image.yml`
Dropped	`.github/workflows/publish-workspace-server-image.yml` (left for reference; dormant)

Port notes (same pattern as publish-runtime.yml, issue #206)

GitHub Actions	Gitea Actions
`github.ref_name`	`${GITHUB_REF#refs/heads/}` (same GITHUB_REF format in Gitea runners)
`environment:` declarations	Dropped (Gitea has no named environments)
All other vars (`GITHUB_SHA`, `GITHUB_REPOSITORY`, `secrets.*`, `GITHUB_OUTPUT`)	Identical syntax
`aws-actions/configure-aws-credentials` action	Inline `aws ecr get-login-password

Impact of this fix

After merge, any push to workspace-server/Dockerfile.tenant (or other tracked paths) on staging or main will trigger:

Build + push platform:<sha> + platform-tenant:<sha> to ECR
Tag :staging-latest (same digest as :staging-<sha>)

New tenants will get the post-#223 image with the chown fix. The workaround (manual operator-host rebuild) is no longer needed.

🤖 Generated with Claude Code

## Summary Port `publish-workspace-server-image.yml` from `.github/workflows/` to `.gitea/workflows/`. Since the GitHub org suspension (2026-05-06), the GitHub Actions workflow is dormant — Gitea Actions reads `.gitea/workflows/` only. Impact: Dockerfile.tenant changes (e.g. PR #223 chown fix) no longer trigger platform image rebuilds, so new tenants get the broken pre-#223 image. ## What changed | | | |---|---| | **New file** | `.gitea/workflows/publish-workspace-server-image.yml` | | **Dropped** | `.github/workflows/publish-workspace-server-image.yml` (left for reference; dormant) | ## Port notes (same pattern as publish-runtime.yml, issue #206) | GitHub Actions | Gitea Actions | |---|---| | `github.ref_name` | `${GITHUB_REF#refs/heads/}` (same GITHUB_REF format in Gitea runners) | | `environment:` declarations | Dropped (Gitea has no named environments) | | All other vars (`GITHUB_SHA`, `GITHUB_REPOSITORY`, `secrets.*`, `GITHUB_OUTPUT`) | Identical syntax | | `aws-actions/configure-aws-credentials` action | Inline `aws ecr get-login-password | docker login` (matches GitHub version approach) | ## Impact of this fix After merge, any push to `workspace-server/Dockerfile.tenant` (or other tracked paths) on `staging` or `main` will trigger: - Build + push `platform:<sha>` + `platform-tenant:<sha>` to ECR - Tag `:staging-latest` (same digest as `:staging-<sha>`) New tenants will get the post-#223 image with the chown fix. The workaround (manual operator-host rebuild) is no longer needed. 🤖 Generated with Claude Code

core-be added 1 commit 2026-05-10 04:11:38 +00:00

fix(ci): port publish-workspace-server-image.yml from .github/ to .gitea/workflows/ (issue #228 )

sop-tier-check / tier-check (pull_request) Failing after 4s

Details

Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 6s

Details

5d8a57026b

The GitHub Actions workflow is dormant because the GitHub org is suspended.
Gitea Actions reads .gitea/workflows/ only, so Dockerfile.tenant changes no
longer trigger platform image rebuilds — new tenants get the broken pre-#223
image.

Port follows the same pattern as the publish-runtime.yml port (issue #206):
- Gitea Actions reads .gitea/workflows/ (drop .github/workflows/ version)
- Drop `environment:` declarations (Gitea has no named environments)
- Replace `github.ref_name` with `${GITHUB_REF#refs/heads/}` (same variable
  format available in Gitea runners)
- All other vars (GITHUB_SHA, GITHUB_REPOSITORY, secrets.*, GITHUB_OUTPUT)
  use identical syntax to GitHub Actions
- Inline `aws ecr get-login-password | docker login` (same as GitHub version;
  no GitHub-specific actions needed)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

core-lead added the

tier:low

label 2026-05-10 04:17:33 +00:00

core-lead approved these changes 2026-05-10 04:17:34 +00:00

Dismissed

core-lead left a comment

[core-lead-agent] LGTM. Pre-approving while #229 deadlock holds. tier:low.