bread-ecosystem/scripts
Breadway a4f0c96b90 scripts: add onboard-product.sh, teach doctor-channels.sh to check signing secrets
breadcast shipped with a full bakery.toml + CI workflows but was missing
from registry/bread-ecosystem.toml and had zero Forgejo Actions secrets
configured, so its release workflows would have failed closed (or worse,
published unsigned on an older workflow shape) the first time they ran.
Neither gap was visible until checked by hand.

doctor-channels.sh now also flags any registry product's repo missing the
BAKERY_MINISIGN_SEC_KEY_PATH secret (soft-skipped without a local Forgejo
token). onboard-product.sh handles the one genuine write step — adding a
[[products]] entry — then runs doctor-channels.sh so nothing else gets
missed silently again. Also fixes a pre-existing false positive where the
local-checkout drift scan didn't recognize worktree checkouts of
bread-ecosystem itself beyond the one literal "-fix-worktree" suffix it
special-cased.
2026-08-05 18:54:25 +08:00
..
cleanup-old-mirror-workflows.sh Add push-mirror provisioning + old mirror.yml cleanup scripts 2026-07-17 14:11:30 +08:00
doctor-channels.sh scripts: add onboard-product.sh, teach doctor-channels.sh to check signing secrets 2026-08-05 18:54:25 +08:00
gen-index.sh bakery: fix correctness, reliability, and security issues from audit 2026-08-05 13:55:57 +08:00
get.sh bakery: rotate signing key, fix broken index-signature verification 2026-07-21 19:07:49 +08:00
onboard-product.sh scripts: add onboard-product.sh, teach doctor-channels.sh to check signing secrets 2026-08-05 18:54:25 +08:00
setup-push-mirrors.sh Add push-mirror provisioning + old mirror.yml cleanup scripts 2026-07-17 14:11:30 +08:00
test-gen-index.sh Fix audit findings: bakery index signing, artifact checksums, stale theme docs 2026-07-17 03:37:51 +08:00