The build-and-push job was running on PRs and trying to log in to the
Gitea Container Registry, which always fails on PRs because the
github.token has no package write permission. Add if:
github.event_name == 'push' so the job is skipped for PRs and the
overall run can stay green.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
- Remove 'cache: pip' from setup-python in lint, typecheck, test jobs to fix
intermittent 'archive/tar: write too long' errors on act_runner pods
- Add CARTSNITCH_SERVICE_KEY and CARTSNITCH_FERNET_KEY to test job env
to satisfy Settings pydantic model requirements
Co-Authored-By: Paperclip <noreply@paperclip.ing>
The on.push and on.pull_request triggers only listed [main, dev].
The deploy-uat job condition checks for refs/heads/uat but the
workflow never fires on uat pushes. Add uat to both trigger lists.
Co-Authored-By: Paperclip <noreply@paperclip.ing>