cartsnitch/app

fix: remove DinD/GHCR split to fix Docker socket and infra 403 [CAR-987] #19

Merged

Savannah Savings merged 2 commits from betty/car-987-fix-ci-docker-socket-and-infra-403 into dev

2026-05-23 19:35:14 +00:00

Author	SHA1	Message	Date
Checkout Charlie	ddf2b4fda5	fix: change vars.GITEA_DEPLOY_KEY to secrets.GITEA_DEPLOY_KEY per CTO review CI / e2e (pull_request) Successful in 37s Details CI / audit (pull_request) Successful in 10s Details CI / test (pull_request) Successful in 15s Details CI / lint (pull_request) Successful in 15s Details CI / build-and-push (pull_request) Has been skipped Details CI / deploy-dev (pull_request) Has been skipped Details CI / deploy-uat (pull_request) Has been skipped Details CI / lighthouse (pull_request) Failing after 45s Details	2026-05-23 19:22:21 +00:00
Checkout Charlie	84571473a3	fix: remove DinD/GHCR scan split, use single push step CI / audit (pull_request) Successful in 35s Details CI / lint (pull_request) Successful in 43s Details CI / test (pull_request) Successful in 42s Details CI / deploy-dev (pull_request) Has been skipped Details CI / e2e (pull_request) Successful in 1m3s Details CI / build-and-push (pull_request) Has been skipped Details CI / deploy-uat (pull_request) Has been skipped Details CI / lighthouse (pull_request) Failing after 45s Details CAR-987: Docker socket missing was caused by load:true requiring a local Docker daemon (DinD sidecar). Using push:true with registry authentication removes the need for local Docker daemon access. Also removed anchore scan step which required the loaded image. For infra repo access: changed secrets.GITEA_TOKEN to vars.GITEA_DEPLOY_KEY since Gitea Actions auto-token only has repo-scoped permissions and cannot access cross-repo resources like cartsnitch/infra (which is private). Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-23 19:06:16 +00:00