Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Jorijn van der Graaf 7eb837fd55 fix(ci): sign with a key kept on the runner host ... The runner is our own machine, so the repo signing key does not need to pass through the forge as a secret. It is generated once under /etc/crafter-flatpak on the host and bind-mounted read-only into the job container, where each run imports it into a throwaway keyring. One less secret to manage, and the private key never leaves the box that uses it. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>		2026-10-02 23:52:13 +02:00
..
workflows	fix(ci): sign with a key kept on the runner host	2026-10-02 23:52:13 +02:00