4 Commits

Include renames

Author	SHA1	Message	Date
clawbot	cba526d33f	Ignore secrets and editor files in .gitignore (closes #40) ... .gitignore had no secret patterns at all. It is now the org's standard file, which ignores .env, .env.*, *.pem and *.key and editor and OS files, plus this repo's /secret (anchored, so internal/secret/ is not matched), *.log, *.test and settings.local.json. The stale .cursorrules and coverage.out entries are gone. No tracked file matches the new patterns. .dockerignore also leaves out node_modules and ends with a newline. .git stays in the build context because the build stamps the version with git describe; .git/config stays excluded. Model: opus-5-5	2026-10-04 09:24:59 +02:00
clawbot	d52b4f1240	Let a plain docker build pass and stamp the git version (closes #57) ... The size tests skip a case whose secret needs more locked memory than the process can lock, found by locking a buffer of that size: memguard panics otherwise, and a plain `docker build .` runs under an 8 MiB RLIMIT_MEMLOCK. script/cibuild, or any process allowed to lock past the limit, runs every case. The build stage stamps the VERSION build argument, else `git describe --tags --always`, and fails when .git is present but yields no version. `make build` stamps `git describe` too instead of the fixed 0.1.0. .dockerignore keeps .git/config out; script/docker is now the canonical copy. Model: opus-5-5 Co-authored-by: clawbot <sneak+clawbot@sneak.cloud>	2026-10-02 14:16:02 +02:00
3 people	b090b3f86b	ci: add Gitea Actions workflow for make check (#21) ... Adds CI workflow that runs `make check` on push/PR to main. Co-authored-by: user <user@Mac.lan guest wan> Co-authored-by: clawbot <clawbot@eeqj.de> Reviewed-on: #21 Co-authored-by: clawbot <sneak+clawbot@sneak.cloud> Co-committed-by: clawbot <sneak+clawbot@sneak.cloud>	2026-03-30 21:34:49 +02:00
sneak	377b51f2db	Add Docker support for building and running the CLI tool ... - Add DOCKER_HOST export to Makefile for remote Docker daemon - Create multi-stage Dockerfile: - Build stage: golang:1.24-alpine with gcc, make, git - Runtime stage: alpine with ca-certificates, gnupg - Runs as non-root 'secret' user - Add Makefile targets: - docker: build container as sneak/secret - docker-run: run container interactively - Add .dockerignore to exclude build artifacts but keep .git for potential linker flags Container includes GPG support for PGP unlockers and runs on Linux, making it suitable for cross-platform testing and deployment.	2025-07-21 22:13:19 +02:00