sqlite-web 0.7.2
gitea.db
action_run_job
Create
Query
access
access_token
action
action_artifact
action_run
action_run_index
action_run_job
action_runner
action_runner_token
action_schedule
action_schedule_spec
action_task
action_task_output
action_task_step
action_tasks_version
action_variable
app_state
attachment
auth_token
badge
branch
collaboration
comment
commit_status
commit_status_index
commit_status_summary
commit_sync_log
commit_sync_status
dbfs_data
dbfs_meta
deploy_key
email_address
email_hash
external_login_user
follow
gpg_key
gpg_key_import
hook_task
issue
issue_assignees
issue_content_history
issue_dependency
issue_index
issue_label
issue_pin
issue_user
issue_watch
label
language_stat
lfs_lock
lfs_meta_object
login_source
milestone
mirror
notice
notification
oauth2_application
oauth2_authorization_code
oauth2_grant
org_user
package
package_blob
package_blob_upload
package_cleanup_rule
package_file
package_property
package_version
project
project_board
project_issue
protected_branch
protected_tag
public_key
pull_auto_merge
pull_request
push_mirror
reaction
release
renamed_branch
repo_archiver
repo_hidden_file
repo_indexer_status
repo_license
repo_redirect
repo_topic
repo_transfer
repo_unit
repository
review
review_state
secret
session
sqlite_sequence
star
stopwatch
system_setting
task
team
team_invite
team_repo
team_unit
team_user
topic
tracked_time
two_factor
upload
user
user_badge
user_blocking
user_open_id
user_redirect
user_setting
version
watch
webauthn_credential
webhook
Toggle helper tables
Structure
Content
Query
Insert
Drop
Import
Export
Delete row 48291 from action_run_job
id
48291
run_id
27190
repo_id
116
owner_id
5
commit_sha
b318dd6b7abf048b5237405aff64af80410d2334
is_fork_pull_request
0
name
Runtime image build + SBOM (+ cosign when a key is
Runtime image build + SBOM (+ cosign when a key is provided)
...
attempt
1
workflow_payload
name: Platform "on": pull_request:
name: Platform "on": pull_request: push: branches: [main] workflow_dispatch: env: GITEA_ACTIONS: "true" PNPM_VERSION: 9.15.9 jobs: image: name: Runtime image build + SBOM (+ cosign when a key is provided) runs-on: ubuntu-latest if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }} steps: - name: Candidate tag (real run attempt, computed per job) run: | if ! [[ "${GITHUB_RUN_ATTEMPT:-}" =~ ^[1-9][0-9]*$ ]]; then echo "::error::GITHUB_RUN_ATTEMPT is missing or invalid on this runner; the candidate tag needs the real attempt (no fallback, decision 2026-10-11)" exit 1 fi echo "CANDIDATE_TAG=${GITHUB_SHA}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}" >> "$GITHUB_ENV" - uses: https://github.com/actions/checkout@v4 with: fetch-depth: "0" - name: Enable pnpm run: | corepack enable corepack prepare pnpm@${PNPM_VERSION} --activate - uses: https://github.com/actions/setup-node@v4 with: node-version: "20" - name: Private registry auth (temporary userconfig) uses: ./.github/actions/private-npm with: token: ${{ secrets.PLATFORM_NPM_TOKEN }} - name: Install locked governance tools run: pnpm --dir governance install --frozen-lockfile --ignore-scripts - name: Resolve npmrc for BuildKit secret (never printed) run: | cfg="${RUNNER_TEMP}/platform-npmrc-resolved" umask 077 printf '@juhai:registry=https://gitea.g-hi.com/api/packages/luoanwu/npm/\n//gitea.g-hi.com/api/packages/luoanwu/npm/:_authToken=%s\n' "${GITEA_NPM_TOKEN}" > "${cfg}" echo "PLATFORM_NPMRC=${cfg}" >> "${GITHUB_ENV}" - name: Build runtime image from git archive HEAD:runtime (reports/image-digest.json) run: node governance/build-image.mjs --context head --npmrc "${PLATFORM_NPMRC}" - name: Install syft (pinned) and generate SPDX SBOM run: | curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b "${RUNNER_TEMP}/bin" v1.20.0 PATH="${RUNNER_TEMP}/bin:${PATH}" node governance/sbom.mjs - name: Install cosign (pinned) uses: https://github.com/sigstore/cosign-installer@v3 with: cosign-release: v2.4.1 - name: Sign image when COSIGN_PRIVATE_KEY is provided (otherwise explicit skip) run: | if [ -n "${COSIGN_PRIVATE_KEY}" ]; then umask 077; printf '%s' "${COSIGN_PRIVATE_KEY}" > "${RUNNER_TEMP}/cosign.key" COSIGN_KEY="${RUNNER_TEMP}/cosign.key" node governance/sign-image.mjs else node governance/sign-image.mjs fi env: COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }} COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }} - if: always() name: Upload image evidence uses: https://github.com/actions/upload-artifact@v3 with: if-no-files-found: warn name: platform-image-${{ env.CANDIDATE_TAG }} path: | reports/image-digest.json reports/sbom.spdx.json reports/sbom.latest.json reports/signature.json retention-days: "30" timeout-minutes: "40" permissions: contents: read
...
job_id
image
needs
["static"]
runs_on
["ubuntu-latest"]
task_id
39028
status
4
started
1794192601
stopped
1794192601
created
1794192582
updated
1794192601
raw_concurrency
is_concurrency_evaluated
1
concurrency_group
concurrency_cancel
0
Delete
Cancel