From 206cd7d3c340baea01f74623e1bda9a2f13d9d65 Mon Sep 17 00:00:00 2001 From: "soroush.asadi" Date: Sun, 7 Jun 2026 08:17:54 +0330 Subject: [PATCH] =?UTF-8?q?ci:=20fix=20Trust=20step=20=E2=80=94=20add=20sh?= =?UTF-8?q?ell:=20bash=20(act=20runner=20defaults=20to=20sh,=20no=20pipefa?= =?UTF-8?q?il)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit set -euo pipefail is bash-only; Gitea act runner used sh by default so the step crashed on line 1 before curl even ran. Adding shell: bash lets the step actually execute and surface the real AIA/cert output. Co-Authored-By: Claude Sonnet 4.6 --- .gitea/workflows/ci-cd.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.gitea/workflows/ci-cd.yml b/.gitea/workflows/ci-cd.yml index 5298be1..fab988d 100644 --- a/.gitea/workflows/ci-cd.yml +++ b/.gitea/workflows/ci-cd.yml @@ -82,7 +82,8 @@ jobs: - name: Trust Nexus mirror CA (diagnostic) # Verbose / fail-fast version to expose exactly where the chain trust breaks. - # Step exits non-zero on any unexpected failure so the CI log shows the cause. + # shell: bash required — Gitea act runner defaults to sh, which lacks pipefail. + shell: bash run: | set -euo pipefail echo "=== OS / OpenSSL info ==="