Commit Graph
5 Commits
Author SHA1 Message Date
Drew Newberry db3057b68e refactor(bootstrap): remove XOR-obfuscated default registry token
GHCR repos are now public and no longer require authentication by
default. Remove the baked-in XOR-encoded PAT and all automatic
credential injection. Image pulls are unauthenticated unless the user
explicitly provides credentials via --registry-username/--registry-token
flags or OPENSHELL_REGISTRY_USERNAME/OPENSHELL_REGISTRY_TOKEN env vars.

Also adds a new --registry-username CLI flag on gateway start for
private registry use cases, and removes the automatic community
registry credential injection (COMMUNITY_REGISTRY_* env vars) since
community sandbox images on GHCR are also public.
2026-03-14 14:44:26 -07:00
Drew Newberry 1ba798f0fb ci(release): pin OPENSHELL_IMAGE_TAG to version for tagged releases (#297) 2026-03-13 19:28:35 -07:00
Drew Newberry 19c3230267 feat(ci): add automated release workflow with patch version bumping (#284) 2026-03-13 17:44:22 -07:00
Drew Newberry 20c32716ad fix(bootstrap): detect missing sandbox supervisor binary during gateway health check (#281) 2026-03-13 15:07:50 -07:00
Drew Newberry fbd93a4632 refactor: rename navigator- crate prefix to openshell- (#277) 2026-03-13 02:02:18 -07:00