jwright 83edaf5975 M5: publish seam + CI/CD pipeline ...

scripts/new-post.mjs writes schema-valid posts from flags or a JSON event
(the IaC publish seam). Gitea Actions workflow: ci check, audit-ci gate,
build, dist scan, CycloneDX SBOM, buildah build+push, and a least-privilege
digest-bump PR to home-ops (never auto-merged). Renovate + audit allowlist.

2026-06-17 17:20:54 +10:00

..

build-image.sh

M5: publish seam + CI/CD pipeline

2026-06-17 17:20:54 +10:00

bump-digest.sh

M5: publish seam + CI/CD pipeline

2026-06-17 17:20:54 +10:00

check-build.sh

M4: security pass — strict CSP, header split, build-time scan

2026-06-17 17:12:57 +10:00

gen-og.mjs

Populate site with real CV data; restyle OG subtitle

2026-06-17 16:44:03 +10:00

new-post.mjs

M5: publish seam + CI/CD pipeline

2026-06-17 17:20:54 +10:00