From d291615c715f280706df0146aa6dd311835723a7 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 26 Jun 2026 11:34:14 +0000 Subject: [PATCH] ci: stop publishing oikos and claim-forge images Follow-up to the earlier trust-pipeline-images cleanup. Two more services were still built and pushed (now also with build-provenance attestations) under odds-and-sods, mis-attributing their GHCR packages: oikos -> belongs to hyperpolymath/oikosbot (relink the package there) claim-forge -> part of a private system; must not be published publicly here Both are removed from the build matrix. cerro-torre is the only service still built here, pending confirmation it has no upstream or private home of its own. Note: oikos/claim-forge are still referenced by trust-pipeline-e2e.yml, selur-compose.yml and OPSM core; deleting their packages needs a separate pass to strip those references (same applies to the retired cicd-hyper-a). Co-Authored-By: Claude Opus 4.8 Claude-Session: https://claude.ai/code/session_01J88oVkzkSn8DyHx3zxKeXS --- .github/workflows/trust-pipeline-images.yml | 23 +++++++++++---------- 1 file changed, 12 insertions(+), 11 deletions(-) diff --git a/.github/workflows/trust-pipeline-images.yml b/.github/workflows/trust-pipeline-images.yml index bab6054..c0106cd 100644 --- a/.github/workflows/trust-pipeline-images.yml +++ b/.github/workflows/trust-pipeline-images.yml @@ -10,15 +10,17 @@ # which is why building a foreign service here silently mis-attributed it to # odds-and-sods-package-manager.) # -# Built elsewhere (do NOT add back here): +# Built / published elsewhere (do NOT add back here): # selur, vordr -> hyperpolymath/stapeln # checky-monkey -> hyperpolymath/checky-monkey # palimpsest-license -> hyperpolymath/palimpsest-license # svalinn -> hyperpolymath/svalinn -# cicd-hyper-a -> retired name (project is hyperpolymath/hypatia); not published +# oikos -> hyperpolymath/oikosbot +# cicd-hyper-a -> retired; no longer exists, GHCR package to be deleted +# claim-forge -> owner's private system; must not be published publicly here # -# OPSM-native services built here (no separate upstream repo): -# claim-forge, oikos, cerro-torre +# OPSM-native service(s) built here: +# cerro-torre (pending confirmation it has no upstream/private home of its own) name: Trust Pipeline Images on: @@ -45,13 +47,12 @@ jobs: fail-fast: false matrix: include: - # OPSM-native services only (no upstream repo of their own). - # Services with their own repo (selur, vordr -> stapeln, checky-monkey, - # palimpsest-license, svalinn) publish their own images so each GHCR - # package links to the correct source repository. cicd-hyper-a is a - # retired name (now hyperpolymath/hypatia) and is no longer published. - - service: claim-forge - - service: oikos + # OPSM-native services only. Anything with its own repo or that belongs + # to a private system is published by its owner, so each GHCR package + # links to the correct source: selur/vordr -> stapeln, checky-monkey, + # palimpsest-license, svalinn, oikos -> oikosbot. cicd-hyper-a is + # retired; claim-forge belongs to a private system. cerro-torre is the + # only one still built here, pending confirmation it has no other home. - service: cerro-torre steps: - name: Checkout