From 411f780f5eb1f0e8dcde9fc55ba5eec3c887e7c4 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 15:32:48 -0400
Subject: [PATCH 01/22] feat(ci): add main release workflow

---
 .gitea/workflows/main.yaml | 63 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 63 insertions(+)
 create mode 100644 .gitea/workflows/main.yaml

diff --git a/.gitea/workflows/main.yaml b/.gitea/workflows/main.yaml
new file mode 100644
index 0000000..3261c05
--- /dev/null
+++ b/.gitea/workflows/main.yaml
@@ -0,0 +1,63 @@
+name: Main Release
+
+on:
+  push:
+    branches: [master]
+
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        continue-on-error: true
+        with:
+          dockerfile: Dockerfile
+
+  build-push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c7c0e41c7c6c4d5afdd7de93d0b3df5 # v4
+      - uses: docker/login-action@650006c6eb7dba73a995c03b20b2d7f5ca915bee # v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - id: meta
+        uses: docker/metadata-action@80c7e94dd9b93191bdde7c7e0f9d92e17a2a2e9 # v6
+        with:
+          images: jcabillot/cipherscan
+          tags: |
+            type=raw,value=latest
+      - uses: docker/build-push-action@f9f3042f7e2789586610b4f04d6b93c1f85baf # v7.2.0
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          pull: true
+
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c7c0e41c7c6c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t ci-image:${{ github.sha }} .
+      - run: bash tests/test.sh ci-image:${{ github.sha }}
+
+  tag:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
+        with:
+          fetch-depth: 0
+      - name: Configure git auth
+        run: |
+          git remote set-url origin "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@scm.cabillot.eu/perso/cipherscan.git"
+      - uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1.75.0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          DEFAULT_BUMP: patch
+          RELEASE_BRANCHES: master
+          WITH_V: true
+          GIT_API_TAGGING: false

From 574a66691e2e43f438b441ff334813e5af06e9a2 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 15:32:56 -0400
Subject: [PATCH 02/22] feat(ci): add PR checks workflow

---
 .gitea/workflows/pr.yaml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 .gitea/workflows/pr.yaml

diff --git a/.gitea/workflows/pr.yaml b/.gitea/workflows/pr.yaml
new file mode 100644
index 0000000..b461cb2
--- /dev/null
+++ b/.gitea/workflows/pr.yaml
@@ -0,0 +1,23 @@
+name: PR Checks
+
+on:
+  pull_request:
+    branches: [master]
+
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        continue-on-error: true
+        with:
+          dockerfile: Dockerfile
+
+  build-test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c7c0e41c7c6c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t ci-image:${{ github.sha }} .
+      - run: bash tests/test.sh ci-image:${{ github.sha }}

From 2d27619355d124a7dec3de961ffa32e0e3cc5e31 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 15:33:08 -0400
Subject: [PATCH 03/22] feat(ci): add tag release workflow

---
 .gitea/workflows/tag.yaml | 38 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 .gitea/workflows/tag.yaml

diff --git a/.gitea/workflows/tag.yaml b/.gitea/workflows/tag.yaml
new file mode 100644
index 0000000..85942ea
--- /dev/null
+++ b/.gitea/workflows/tag.yaml
@@ -0,0 +1,38 @@
+name: Tag Release
+
+on:
+  push:
+    tags: ['*']
+
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        continue-on-error: true
+        with:
+          dockerfile: Dockerfile
+
+  build-push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c7c0e41c7c6c4d5afdd7de93d0b3df5 # v4
+      - uses: docker/login-action@650006c6eb7dba73a995c03b20b2d7f5ca915bee # v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - id: meta
+        uses: docker/metadata-action@80c7e94dd9b93191bdde7c7e0f9d92e17a2a2e9 # v6
+        with:
+          images: jcabillot/cipherscan
+          tags: |
+            type=ref,event=tag
+      - uses: docker/build-push-action@f9f3042f7e2789586610b4f04d6b93c1f85baf # v7.2.0
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          pull: true

From 354e0b9f8a52402a403ce02b097f9501bed4ea00 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 15:33:15 -0400
Subject: [PATCH 04/22] feat(ci): add nightly rebuild workflow

---
 .gitea/workflows/cron.yaml | 45 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 45 insertions(+)
 create mode 100644 .gitea/workflows/cron.yaml

diff --git a/.gitea/workflows/cron.yaml b/.gitea/workflows/cron.yaml
new file mode 100644
index 0000000..1cf1602
--- /dev/null
+++ b/.gitea/workflows/cron.yaml
@@ -0,0 +1,45 @@
+name: Nightly Rebuild
+
+on:
+  schedule:
+    - cron: '0 0 * * *'
+
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        continue-on-error: true
+        with:
+          dockerfile: Dockerfile
+
+  build-push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
+        with:
+          fetch-depth: 0
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c7c0e41c7c6c4d5afdd7de93d0b3df5 # v4
+      - uses: docker/login-action@650006c6eb7dba73a995c03b20b2d7f5ca915bee # v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - id: get-latest-tag
+        run: |
+          TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
+          echo "tag=$TAG" >> $GITHUB_OUTPUT
+      - id: meta
+        uses: docker/metadata-action@80c7e94dd9b93191bdde7c7e0f9d92e17a2a2e9 # v6
+        with:
+          images: jcabillot/cipherscan
+          tags: |
+            type=raw,value=latest
+            type=raw,value=${{ steps.get-latest-tag.outputs.tag }},enable=${{ steps.get-latest-tag.outputs.tag != '' }}
+      - uses: docker/build-push-action@f9f3042f7e2789586610b4f04d6b93c1f85baf # v7.2.0
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          pull: true

From 7fdbd1bffc9981f838fd62ad915f2441260a3213 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 15:33:26 -0400
Subject: [PATCH 05/22] chore: remove old docker-build.yaml in favor of
 4-workflow pipeline

---
 .gitea/workflows/docker-build.yaml | 82 ------------------------------
 1 file changed, 82 deletions(-)
 delete mode 100644 .gitea/workflows/docker-build.yaml

diff --git a/.gitea/workflows/docker-build.yaml b/.gitea/workflows/docker-build.yaml
deleted file mode 100644
index 7d2e59c..0000000
--- a/.gitea/workflows/docker-build.yaml
+++ /dev/null
@@ -1,82 +0,0 @@
-name: Docker Build and Push
-
-on:
-  pull_request:
-  push:
-    branches: [master]
-  schedule:
-    - cron: '30 3 * * 3'
-
-jobs:
-  lint:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - name: Hadolint
-        uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
-
-  build:
-    runs-on: ubuntu-latest
-    needs: lint
-    steps:
-      - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - name: Build image
-        run: docker build -t ci-image:${{ github.sha }} .
-      - name: Save image
-        run: docker save ci-image:${{ github.sha }} > image.tar
-      - name: Upload artifact
-        uses: ChristopherHX/gitea-upload-artifact@62ac910c5d3dfa85c7cb2df15afe2e342b2407c2 # main
-        with:
-          name: docker-image
-          path: image.tar
-
-  test:
-    runs-on: ubuntu-latest
-    needs: build
-    steps:
-      - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - name: Download artifact
-        uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7 # main
-        with:
-          name: docker-image
-      - name: Load image
-        run: docker load < image.tar
-      - name: Run tests
-        run: bash tests/test.sh ci-image:${{ github.sha }}
-
-  push:
-    runs-on: ubuntu-latest
-    if: github.event_name != 'pull_request'
-    needs: test
-    steps:
-      - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-        with:
-          fetch-depth: 0
-      - name: Download artifact
-        uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7 # main
-        with:
-          name: docker-image
-      - name: Load image
-        run: docker load < image.tar
-      - name: Login to Docker Hub
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - name: Tag and push
-        run: |
-          docker tag ci-image:${{ github.sha }} jcabillot/cipherscan:latest
-          docker push jcabillot/cipherscan:latest
-      - name: Bump version and push tag
-        if: github.event_name == 'push'
-        uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1.75.0
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          DEFAULT_BUMP: patch
-          RELEASE_BRANCHES: master
-          WITH_V: true
-          GIT_API_TAGGING: false
\ No newline at end of file

From a4519dbc042763793bcf27653998079878b2fb1c Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:07:44 -0400
Subject: [PATCH 06/22] feat(ci): add PR checks workflow

---
 .forgejo/workflows/pr.yaml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 .forgejo/workflows/pr.yaml

diff --git a/.forgejo/workflows/pr.yaml b/.forgejo/workflows/pr.yaml
new file mode 100644
index 0000000..90900eb
--- /dev/null
+++ b/.forgejo/workflows/pr.yaml
@@ -0,0 +1,20 @@
+name: PR Checks
+on:
+  pull_request:
+    branches: [master]
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        continue-on-error: true
+        with:
+          dockerfile: Dockerfile
+  build-test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t ci-image:${{ github.sha }} .
+      - run: bash tests/test.sh ci-image:${{ github.sha }}

From 11d2e6596c57e2fa71f4ac2d6191c1c88b951861 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:07:50 -0400
Subject: [PATCH 07/22] feat(ci): add main release workflow

---
 .forgejo/workflows/main.yaml | 58 ++++++++++++++++++++++++++++++++++++
 1 file changed, 58 insertions(+)
 create mode 100644 .forgejo/workflows/main.yaml

diff --git a/.forgejo/workflows/main.yaml b/.forgejo/workflows/main.yaml
new file mode 100644
index 0000000..aacb7bd
--- /dev/null
+++ b/.forgejo/workflows/main.yaml
@@ -0,0 +1,58 @@
+name: Main Release
+on:
+  push:
+    branches: [master]
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        continue-on-error: true
+        with:
+          dockerfile: Dockerfile
+  build-push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - id: meta
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
+        with:
+          images: jcabillot/cipherscan
+          tags: |
+            type=raw,value=latest
+      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          pull: true
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t ci-image:${{ github.sha }} .
+      - run: bash tests/test.sh ci-image:${{ github.sha }}
+  tag:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        with:
+          fetch-depth: 0
+      - name: Configure git auth
+        run: |
+          git remote set-url origin "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@scm.cabillot.eu/perso/cipherscan.git"
+      - uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1.75.0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          DEFAULT_BUMP: patch
+          RELEASE_BRANCHES: master
+          WITH_V: true
+          GIT_API_TAGGING: false

From 6647757813ebbf01d7307d1ba48938e616c7c3ab Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:07:57 -0400
Subject: [PATCH 08/22] feat(ci): add tag release workflow

---
 .forgejo/workflows/tag.yaml | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 .forgejo/workflows/tag.yaml

diff --git a/.forgejo/workflows/tag.yaml b/.forgejo/workflows/tag.yaml
new file mode 100644
index 0000000..4578caf
--- /dev/null
+++ b/.forgejo/workflows/tag.yaml
@@ -0,0 +1,35 @@
+name: Tag Release
+on:
+  push:
+    tags: ['*']
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        continue-on-error: true
+        with:
+          dockerfile: Dockerfile
+  build-push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - id: meta
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
+        with:
+          images: jcabillot/cipherscan
+          tags: |
+            type=ref,event=tag
+      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          pull: true

From abb697e67dcc17c425aeae5b92ee2fe7bf4a3be2 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:08:02 -0400
Subject: [PATCH 09/22] feat(ci): add nightly rebuild workflow

---
 .forgejo/workflows/cron.yaml | 42 ++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)
 create mode 100644 .forgejo/workflows/cron.yaml

diff --git a/.forgejo/workflows/cron.yaml b/.forgejo/workflows/cron.yaml
new file mode 100644
index 0000000..6aa16a2
--- /dev/null
+++ b/.forgejo/workflows/cron.yaml
@@ -0,0 +1,42 @@
+name: Nightly Rebuild
+on:
+  schedule:
+    - cron: '0 0 * * *'
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        continue-on-error: true
+        with:
+          dockerfile: Dockerfile
+  build-push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        with:
+          fetch-depth: 0
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - id: get-latest-tag
+        run: |
+          TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
+          echo "tag=$TAG" >> $GITHUB_OUTPUT
+      - id: meta
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
+        with:
+          images: jcabillot/cipherscan
+          tags: |
+            type=raw,value=latest
+            type=raw,value=${{ steps.get-latest-tag.outputs.tag }},enable=${{ steps.get-latest-tag.outputs.tag != '' }}
+      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          pull: true

From 35ddb9eb4d1bcef738327aa2f7af66a5247d8d90 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:09:05 -0400
Subject: [PATCH 10/22] chore(ci): remove stale workflow files from
 .gitea/workflows

---
 .gitea/workflows/pr.yaml | 23 -----------------------
 1 file changed, 23 deletions(-)
 delete mode 100644 .gitea/workflows/pr.yaml

diff --git a/.gitea/workflows/pr.yaml b/.gitea/workflows/pr.yaml
deleted file mode 100644
index b461cb2..0000000
--- a/.gitea/workflows/pr.yaml
+++ /dev/null
@@ -1,23 +0,0 @@
-name: PR Checks
-
-on:
-  pull_request:
-    branches: [master]
-
-jobs:
-  hadolint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
-      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
-        continue-on-error: true
-        with:
-          dockerfile: Dockerfile
-
-  build-test:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c7c0e41c7c6c4d5afdd7de93d0b3df5 # v4
-      - run: docker build -t ci-image:${{ github.sha }} .
-      - run: bash tests/test.sh ci-image:${{ github.sha }}

From 0ee799e27fa96f14c58776cb3687f0a034bc7ef0 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:09:12 -0400
Subject: [PATCH 11/22] chore(ci): remove stale workflow files from
 .gitea/workflows

---
 .gitea/workflows/main.yaml | 63 --------------------------------------
 1 file changed, 63 deletions(-)
 delete mode 100644 .gitea/workflows/main.yaml

diff --git a/.gitea/workflows/main.yaml b/.gitea/workflows/main.yaml
deleted file mode 100644
index 3261c05..0000000
--- a/.gitea/workflows/main.yaml
+++ /dev/null
@@ -1,63 +0,0 @@
-name: Main Release
-
-on:
-  push:
-    branches: [master]
-
-jobs:
-  hadolint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
-      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
-        continue-on-error: true
-        with:
-          dockerfile: Dockerfile
-
-  build-push:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c7c0e41c7c6c4d5afdd7de93d0b3df5 # v4
-      - uses: docker/login-action@650006c6eb7dba73a995c03b20b2d7f5ca915bee # v4
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - id: meta
-        uses: docker/metadata-action@80c7e94dd9b93191bdde7c7e0f9d92e17a2a2e9 # v6
-        with:
-          images: jcabillot/cipherscan
-          tags: |
-            type=raw,value=latest
-      - uses: docker/build-push-action@f9f3042f7e2789586610b4f04d6b93c1f85baf # v7.2.0
-        with:
-          context: .
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          pull: true
-
-  test:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c7c0e41c7c6c4d5afdd7de93d0b3df5 # v4
-      - run: docker build -t ci-image:${{ github.sha }} .
-      - run: bash tests/test.sh ci-image:${{ github.sha }}
-
-  tag:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
-        with:
-          fetch-depth: 0
-      - name: Configure git auth
-        run: |
-          git remote set-url origin "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@scm.cabillot.eu/perso/cipherscan.git"
-      - uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1.75.0
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          DEFAULT_BUMP: patch
-          RELEASE_BRANCHES: master
-          WITH_V: true
-          GIT_API_TAGGING: false

From 886ac56bdfee6476e6cdbf46de58dcbe0819fe18 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:09:15 -0400
Subject: [PATCH 12/22] chore(ci): remove stale workflow files from
 .gitea/workflows

---
 .gitea/workflows/tag.yaml | 38 --------------------------------------
 1 file changed, 38 deletions(-)
 delete mode 100644 .gitea/workflows/tag.yaml

diff --git a/.gitea/workflows/tag.yaml b/.gitea/workflows/tag.yaml
deleted file mode 100644
index 85942ea..0000000
--- a/.gitea/workflows/tag.yaml
+++ /dev/null
@@ -1,38 +0,0 @@
-name: Tag Release
-
-on:
-  push:
-    tags: ['*']
-
-jobs:
-  hadolint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
-      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
-        continue-on-error: true
-        with:
-          dockerfile: Dockerfile
-
-  build-push:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c7c0e41c7c6c4d5afdd7de93d0b3df5 # v4
-      - uses: docker/login-action@650006c6eb7dba73a995c03b20b2d7f5ca915bee # v4
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - id: meta
-        uses: docker/metadata-action@80c7e94dd9b93191bdde7c7e0f9d92e17a2a2e9 # v6
-        with:
-          images: jcabillot/cipherscan
-          tags: |
-            type=ref,event=tag
-      - uses: docker/build-push-action@f9f3042f7e2789586610b4f04d6b93c1f85baf # v7.2.0
-        with:
-          context: .
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          pull: true

From aef8753e44db83369af1979acfb1aaf21e7a3908 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:09:20 -0400
Subject: [PATCH 13/22] chore(ci): remove stale workflow files from
 .gitea/workflows

---
 .gitea/workflows/cron.yaml | 45 --------------------------------------
 1 file changed, 45 deletions(-)
 delete mode 100644 .gitea/workflows/cron.yaml

diff --git a/.gitea/workflows/cron.yaml b/.gitea/workflows/cron.yaml
deleted file mode 100644
index 1cf1602..0000000
--- a/.gitea/workflows/cron.yaml
+++ /dev/null
@@ -1,45 +0,0 @@
-name: Nightly Rebuild
-
-on:
-  schedule:
-    - cron: '0 0 * * *'
-
-jobs:
-  hadolint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
-      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
-        continue-on-error: true
-        with:
-          dockerfile: Dockerfile
-
-  build-push:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4111f1884172cec0e10 # v6
-        with:
-          fetch-depth: 0
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c7c0e41c7c6c4d5afdd7de93d0b3df5 # v4
-      - uses: docker/login-action@650006c6eb7dba73a995c03b20b2d7f5ca915bee # v4
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - id: get-latest-tag
-        run: |
-          TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
-          echo "tag=$TAG" >> $GITHUB_OUTPUT
-      - id: meta
-        uses: docker/metadata-action@80c7e94dd9b93191bdde7c7e0f9d92e17a2a2e9 # v6
-        with:
-          images: jcabillot/cipherscan
-          tags: |
-            type=raw,value=latest
-            type=raw,value=${{ steps.get-latest-tag.outputs.tag }},enable=${{ steps.get-latest-tag.outputs.tag != '' }}
-      - uses: docker/build-push-action@f9f3042f7e2789586610b4f04d6b93c1f85baf # v7.2.0
-        with:
-          context: .
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          pull: true

From 3ed62439a97ca19d0ea6f35c251960222fe7dcb3 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:12:26 -0400
Subject: [PATCH 14/22] chore(ci): force CI re-trigger


From a895fd1b89d78183016894ef26825505c503f910 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:14:52 -0400
Subject: [PATCH 15/22] feat(ci): add PR checks workflow to .gitea/workflows

---
 .gitea/workflows/pr.yaml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 .gitea/workflows/pr.yaml

diff --git a/.gitea/workflows/pr.yaml b/.gitea/workflows/pr.yaml
new file mode 100644
index 0000000..90900eb
--- /dev/null
+++ b/.gitea/workflows/pr.yaml
@@ -0,0 +1,20 @@
+name: PR Checks
+on:
+  pull_request:
+    branches: [master]
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        continue-on-error: true
+        with:
+          dockerfile: Dockerfile
+  build-test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t ci-image:${{ github.sha }} .
+      - run: bash tests/test.sh ci-image:${{ github.sha }}

From 1bc33752ea1428558e30ea3065eb31e82f5514d2 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:14:55 -0400
Subject: [PATCH 16/22] feat(ci): add main release workflow to .gitea/workflows

---
 .gitea/workflows/main.yaml | 58 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 58 insertions(+)
 create mode 100644 .gitea/workflows/main.yaml

diff --git a/.gitea/workflows/main.yaml b/.gitea/workflows/main.yaml
new file mode 100644
index 0000000..aacb7bd
--- /dev/null
+++ b/.gitea/workflows/main.yaml
@@ -0,0 +1,58 @@
+name: Main Release
+on:
+  push:
+    branches: [master]
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        continue-on-error: true
+        with:
+          dockerfile: Dockerfile
+  build-push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - id: meta
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
+        with:
+          images: jcabillot/cipherscan
+          tags: |
+            type=raw,value=latest
+      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          pull: true
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t ci-image:${{ github.sha }} .
+      - run: bash tests/test.sh ci-image:${{ github.sha }}
+  tag:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        with:
+          fetch-depth: 0
+      - name: Configure git auth
+        run: |
+          git remote set-url origin "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@scm.cabillot.eu/perso/cipherscan.git"
+      - uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1.75.0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          DEFAULT_BUMP: patch
+          RELEASE_BRANCHES: master
+          WITH_V: true
+          GIT_API_TAGGING: false

From 0ca56d600bc5eb6459a9f0833607d792b0e79372 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:15:01 -0400
Subject: [PATCH 17/22] feat(ci): add tag release workflow to .gitea/workflows

---
 .gitea/workflows/tag.yaml | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100644 .gitea/workflows/tag.yaml

diff --git a/.gitea/workflows/tag.yaml b/.gitea/workflows/tag.yaml
new file mode 100644
index 0000000..4578caf
--- /dev/null
+++ b/.gitea/workflows/tag.yaml
@@ -0,0 +1,35 @@
+name: Tag Release
+on:
+  push:
+    tags: ['*']
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        continue-on-error: true
+        with:
+          dockerfile: Dockerfile
+  build-push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - id: meta
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
+        with:
+          images: jcabillot/cipherscan
+          tags: |
+            type=ref,event=tag
+      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          pull: true

From 8cc464e912662814b9baa0bf237a66093cc80eea Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:15:08 -0400
Subject: [PATCH 18/22] feat(ci): add nightly rebuild workflow to
 .gitea/workflows

---
 .gitea/workflows/cron.yaml | 42 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)
 create mode 100644 .gitea/workflows/cron.yaml

diff --git a/.gitea/workflows/cron.yaml b/.gitea/workflows/cron.yaml
new file mode 100644
index 0000000..6aa16a2
--- /dev/null
+++ b/.gitea/workflows/cron.yaml
@@ -0,0 +1,42 @@
+name: Nightly Rebuild
+on:
+  schedule:
+    - cron: '0 0 * * *'
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        continue-on-error: true
+        with:
+          dockerfile: Dockerfile
+  build-push:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+        with:
+          fetch-depth: 0
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - id: get-latest-tag
+        run: |
+          TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
+          echo "tag=$TAG" >> $GITHUB_OUTPUT
+      - id: meta
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
+        with:
+          images: jcabillot/cipherscan
+          tags: |
+            type=raw,value=latest
+            type=raw,value=${{ steps.get-latest-tag.outputs.tag }},enable=${{ steps.get-latest-tag.outputs.tag != '' }}
+      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          pull: true

From c933607153a03d6719e0f3fcd7309b8b64055310 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:15:20 -0400
Subject: [PATCH 19/22] chore(ci): remove workflows from .forgejo/workflows
 (using .gitea/workflows instead)

---
 .forgejo/workflows/pr.yaml | 20 --------------------
 1 file changed, 20 deletions(-)
 delete mode 100644 .forgejo/workflows/pr.yaml

diff --git a/.forgejo/workflows/pr.yaml b/.forgejo/workflows/pr.yaml
deleted file mode 100644
index 90900eb..0000000
--- a/.forgejo/workflows/pr.yaml
+++ /dev/null
@@ -1,20 +0,0 @@
-name: PR Checks
-on:
-  pull_request:
-    branches: [master]
-jobs:
-  hadolint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
-        continue-on-error: true
-        with:
-          dockerfile: Dockerfile
-  build-test:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
-      - run: docker build -t ci-image:${{ github.sha }} .
-      - run: bash tests/test.sh ci-image:${{ github.sha }}

From 33666c5e19fb8c7dfb6cb70e98aac4ce66d1d97e Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:15:23 -0400
Subject: [PATCH 20/22] chore(ci): remove workflows from .forgejo/workflows

---
 .forgejo/workflows/main.yaml | 58 ------------------------------------
 1 file changed, 58 deletions(-)
 delete mode 100644 .forgejo/workflows/main.yaml

diff --git a/.forgejo/workflows/main.yaml b/.forgejo/workflows/main.yaml
deleted file mode 100644
index aacb7bd..0000000
--- a/.forgejo/workflows/main.yaml
+++ /dev/null
@@ -1,58 +0,0 @@
-name: Main Release
-on:
-  push:
-    branches: [master]
-jobs:
-  hadolint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
-        continue-on-error: true
-        with:
-          dockerfile: Dockerfile
-  build-push:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - id: meta
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
-        with:
-          images: jcabillot/cipherscan
-          tags: |
-            type=raw,value=latest
-      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
-        with:
-          context: .
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          pull: true
-  test:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
-      - run: docker build -t ci-image:${{ github.sha }} .
-      - run: bash tests/test.sh ci-image:${{ github.sha }}
-  tag:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-        with:
-          fetch-depth: 0
-      - name: Configure git auth
-        run: |
-          git remote set-url origin "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@scm.cabillot.eu/perso/cipherscan.git"
-      - uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1.75.0
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          DEFAULT_BUMP: patch
-          RELEASE_BRANCHES: master
-          WITH_V: true
-          GIT_API_TAGGING: false

From a5e2b98660e37656a547c11ff9a7a9e0f3792793 Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:15:29 -0400
Subject: [PATCH 21/22] chore(ci): remove workflows from .forgejo/workflows

---
 .forgejo/workflows/tag.yaml | 35 -----------------------------------
 1 file changed, 35 deletions(-)
 delete mode 100644 .forgejo/workflows/tag.yaml

diff --git a/.forgejo/workflows/tag.yaml b/.forgejo/workflows/tag.yaml
deleted file mode 100644
index 4578caf..0000000
--- a/.forgejo/workflows/tag.yaml
+++ /dev/null
@@ -1,35 +0,0 @@
-name: Tag Release
-on:
-  push:
-    tags: ['*']
-jobs:
-  hadolint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
-        continue-on-error: true
-        with:
-          dockerfile: Dockerfile
-  build-push:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - id: meta
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
-        with:
-          images: jcabillot/cipherscan
-          tags: |
-            type=ref,event=tag
-      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
-        with:
-          context: .
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          pull: true

From de092a92127f57fcde001f333b9c33e09a20878c Mon Sep 17 00:00:00 2001
From: cloudix_mcp_server <julien+mcp@cabillot.eu>
Date: Fri, 12 Jun 2026 16:15:32 -0400
Subject: [PATCH 22/22] chore(ci): remove workflows from .forgejo/workflows

---
 .forgejo/workflows/cron.yaml | 42 ------------------------------------
 1 file changed, 42 deletions(-)
 delete mode 100644 .forgejo/workflows/cron.yaml

diff --git a/.forgejo/workflows/cron.yaml b/.forgejo/workflows/cron.yaml
deleted file mode 100644
index 6aa16a2..0000000
--- a/.forgejo/workflows/cron.yaml
+++ /dev/null
@@ -1,42 +0,0 @@
-name: Nightly Rebuild
-on:
-  schedule:
-    - cron: '0 0 * * *'
-jobs:
-  hadolint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
-        continue-on-error: true
-        with:
-          dockerfile: Dockerfile
-  build-push:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-        with:
-          fetch-depth: 0
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - id: get-latest-tag
-        run: |
-          TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
-          echo "tag=$TAG" >> $GITHUB_OUTPUT
-      - id: meta
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
-        with:
-          images: jcabillot/cipherscan
-          tags: |
-            type=raw,value=latest
-            type=raw,value=${{ steps.get-latest-tag.outputs.tag }},enable=${{ steps.get-latest-tag.outputs.tag != '' }}
-      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
-        with:
-          context: .
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          pull: true