7cc2018
7cc2018b72d151cb921188c7bfb97e9b261575a22b2d5f8
2c773a1| Status | File | + | - |
|---|---|---|---|
| M |
docs/internal/actions-schema.md
|
5 | 4 |
| M |
docs/internal/runbooks/actions-runner.md
|
1 | 1 |
| R |
internal/migrationsfs/migrations/0055_workflow_job_secret_masks.sql →
internal/migrationsfs/migrations/0057_workflow_job_secret_masks.sql
|
0 | 0 |
docs/internal/actions-schema.mdmodified@@ -12,9 +12,10 @@ without churning under them. | ||
| 12 | 12 | |
| 13 | 13 | ## SQL schema |
| 14 | 14 | |
| 15 | -Actions migrations currently span 0042–0051, 0053, and 0055. Migration | |
| 16 | -0052 belongs to the repo source-remotes feature and 0054 belongs to push | |
| 17 | -event protocol tracking. | |
| 15 | +Actions migrations currently span 0042–0051, 0053, and 0057. Migration | |
| 16 | +0052 belongs to the repo source-remotes feature, 0054 belongs to push | |
| 17 | +event protocol tracking, 0055 belongs to the social feed, and 0056 | |
| 18 | +belongs to user profile contribution settings. | |
| 18 | 19 | |
| 19 | 20 | | # | Table | Purpose | |
| 20 | 21 | | ----- | --------------------------- | ------------------------------------------------------------- | |
@@ -29,7 +30,7 @@ event protocol tracking. | ||
| 29 | 30 | | 0050 | `workflow_steps.step_with` | Parsed `with:` inputs for magic `uses:` aliases | |
| 30 | 31 | | 0051 | `workflow_runs.trigger_event_id` | Trigger idempotency for retries/admin replays | |
| 31 | 32 | | 0053 | `runner_jwt_used` | Single-use replay gate for runner job JWTs | |
| 32 | -| 0055 | `workflow_job_secret_masks` | Encrypted claim-time log mask snapshots per job | | |
| 33 | +| 0057 | `workflow_job_secret_masks` | Encrypted claim-time log mask snapshots per job | | |
| 33 | 34 | |
| 34 | 35 | A few load-bearing choices, called out so they're easy to spot in a |
| 35 | 36 | later schema diff: |
docs/internal/runbooks/actions-runner.mdmodified@@ -9,7 +9,7 @@ For host provisioning and the systemd/Ansible path, see | ||
| 9 | 9 | |
| 10 | 10 | Prereqs: |
| 11 | 11 | |
| 12 | -- Database migrations are current through `0055_workflow_job_secret_masks.sql`. | |
| 12 | +- Database migrations are current through `0057_workflow_job_secret_masks.sql`. | |
| 13 | 13 | - `SHITHUB_TOTP_KEY` or `auth.totp_key_b64` is set on the web process. |
| 14 | 14 | - Object storage is configured if testing artifact upload. |
| 15 | 15 | - Docker or Podman is installed on the runner host. |
internal/migrationsfs/migrations/0055_workflow_job_secret_masks.sql → internal/migrationsfs/migrations/0057_workflow_job_secret_masks.sqlrenamed (100% similarity)