mirror of
https://gitea.com/gitea/act_runner.git
synced 2026-10-30 03:46:33 +08:00
f963e9cfe8
Add `runner.client_cert_file` and `runner.client_key_file` for Gitea instances that require mutual TLS. The runner presents the certificate on its RPCs, job summary uploads, and the action, reusable workflow and `builtin:checkout` clones from the instance. The files are read on use, so renewed certificates apply without a restart. Job steps do not get them. An incomplete or mismatched pair fails startup. Clones now decide the token, client certificate and `runner.insecure` with one host check, which also gives reusable workflow clones the TLS settings they lacked. `runner.insecure` still only covers the registered address. Fixes: https://gitea.com/gitea/runner/issues/321 Co-authored-by: silverwind <2021+silverwind@noreply.gitea.com> Co-authored-by: silverwind <me@silverwind.io> Reviewed-on: https://gitea.com/gitea/runner/pulls/1273 Reviewed-by: silverwind <2021+silverwind@noreply.gitea.com> Co-authored-by: bircni <bircni@icloud.com>
27 lines
673 B
Go
27 lines
673 B
Go
// Copyright 2026 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
// Package action holds the native actions run by `uses: builtin:<name>`.
|
|
package action
|
|
|
|
import (
|
|
"gitea.com/gitea/runner/act/container"
|
|
|
|
"gitea.dev/actionslib/pkg/model"
|
|
)
|
|
|
|
type Context struct {
|
|
Container container.ExecutionsEnvironment
|
|
Github *model.GithubContext
|
|
Inputs map[string]string
|
|
HostWorkdir string
|
|
Workspace string // HostWorkdir as seen inside Container
|
|
BindWorkdir bool
|
|
NoSkipCheckout bool
|
|
UseGitIgnore bool
|
|
InsecureSkipTLS bool
|
|
ClientCertFile string
|
|
ClientKeyFile string
|
|
Env map[string]string
|
|
}
|