release-factory

mirror of https://github.com/okxlin/release-factory.git synced 2026-09-22 08:02:15 +00:00

Files

T

History

okxlin e058ba3f73 fix(images): harden runtimes and publish verified artifacts (#85 )

Reject unsafe workstation credentials, fix native ARM64 Java, and remove duplicate extensions, caches and temporary tool layers.

Pin OpenCode's baseline and Gemini's source/runtime inputs; refresh maintained browser and OS packages; fix Nginx and vendored ZIP vulnerabilities. Verify real login, default plugins, browser/CDP persistence and isolated OpenClaw sandbox operations.

Build each platform once and bind release publication to the tested config and manifest digests. Keep service-specific vulnerability gates and refresh DSH APT stages during PR verification.

Validation: all 13 PR verification jobs passed, including native amd64/arm64 workstations and DSH variants, plus both browser variants and OpenClaw on amd64. Publication jobs were skipped for PR verification.

2026-09-13 01:52:07 +08:00

bootstrap-opencode-userland.sh

fix(images): harden runtimes and publish verified artifacts (#85 )

2026-09-13 01:52:07 +08:00

doctor.sh

feat: preinstall actionlint in opencode workstation (#25 )

2026-06-22 01:26:17 +08:00

entrypoint.sh

fix(opencode-workstation): retire stale GPT Unlocked plugin

2026-08-27 20:02:17 +08:00

init.sh

refactor(opencode-workstation): align runtime persistence with official home paths