From 89f56ec23cd67531d00ea2251e64a88f3bf48827 Mon Sep 17 00:00:00 2001 From: Pieter Viljoen Date: Thu, 23 Jul 2026 14:52:54 -0700 Subject: [PATCH 1/2] Correct PhotoCleaner's registry entry to its real publish shape PhotoCleaner finished onboarding: it now publishes multi-arch Docker (linux/amd64,linux/arm64 on main) to Docker Hub via the static DOCKER_HUB_USERNAME/DOCKER_HUB_ACCESS_TOKEN secret, and a github-release attaching the multi-arch executables as a 7z - the same shape as PlexCleaner minus the python subtree. The entry still declared the partial-onboarding state (publish: [], releaseTrigger: none, only CODECOV_TOKEN), so the audit had no mechanism to claim the two Docker Hub secrets against and flagged them as stale in both stores. Declare the real publish targets, secrets, and two-phase release trigger, and refresh the drift notes. Co-Authored-By: Claude Opus 4.8 --- registry/repos.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/registry/repos.json b/registry/repos.json index e6031625..ee64b621 100644 --- a/registry/repos.json +++ b/registry/repos.json @@ -246,11 +246,11 @@ "status": "cataloged", "types": ["csharp", "console", "docker"], "hasDevelop": true, - "publish": [], - "requiredSecrets": ["CODECOV_TOKEN"], + "publish": [{ "target": "docker", "mechanism": "static-secret" }, { "target": "github-release", "mechanism": "none" }], + "requiredSecrets": ["DOCKER_HUB_USERNAME", "DOCKER_HUB_ACCESS_TOKEN", "CODECOV_TOKEN"], "consumerModel": "pull", - "releaseTrigger": "none", - "driftNotes": ["Partially onboarded: the PR gate and linters are live (test-pull-request.yml + validate-task.yml with the canonical aggregator name), but rulesets, repo-config/, version.json, WORKFLOW.md, AUDIT.md, spec/secrets.json, dependabot.yml, and the release pipeline are still missing (reports/photocleaner/audit.md).", "Dockerfile present but no docker build/push workflow, so no publish wired."] + "releaseTrigger": "two-phase", + "driftNotes": ["Mirrors PlexCleaner's publish shape minus the python subtree: multi-arch Docker (linux/amd64,linux/arm64 on main) pushed to Docker Hub via the static DOCKER_HUB_USERNAME/DOCKER_HUB_ACCESS_TOKEN secret, plus a github-release attaching the multi-arch executables as a 7z. Release is two-phase (workflow_dispatch + weekly Mon 02:00 schedule).", "Fully onboarded 2026-07 (rulesets, repo-config/, version.json, WORKFLOW.md, AUDIT.md, dependabot.yml, and the release pipeline all live); the reports/photocleaner/audit.md snapshot predates the docker/release wiring."] }, { "name": "MediaTools", From 7a73b3188f7c05febb68b7ce0e70bd0fd3cbbd18 Mon Sep 17 00:00:00 2001 From: Pieter Viljoen Date: Thu, 23 Jul 2026 14:56:26 -0700 Subject: [PATCH 2/2] Address Copilot: recast the driftNote semicolon splice as two sentences Co-Authored-By: Claude Opus 4.8 --- registry/repos.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/registry/repos.json b/registry/repos.json index ee64b621..fd7bb89d 100644 --- a/registry/repos.json +++ b/registry/repos.json @@ -250,7 +250,7 @@ "requiredSecrets": ["DOCKER_HUB_USERNAME", "DOCKER_HUB_ACCESS_TOKEN", "CODECOV_TOKEN"], "consumerModel": "pull", "releaseTrigger": "two-phase", - "driftNotes": ["Mirrors PlexCleaner's publish shape minus the python subtree: multi-arch Docker (linux/amd64,linux/arm64 on main) pushed to Docker Hub via the static DOCKER_HUB_USERNAME/DOCKER_HUB_ACCESS_TOKEN secret, plus a github-release attaching the multi-arch executables as a 7z. Release is two-phase (workflow_dispatch + weekly Mon 02:00 schedule).", "Fully onboarded 2026-07 (rulesets, repo-config/, version.json, WORKFLOW.md, AUDIT.md, dependabot.yml, and the release pipeline all live); the reports/photocleaner/audit.md snapshot predates the docker/release wiring."] + "driftNotes": ["Mirrors PlexCleaner's publish shape minus the python subtree: multi-arch Docker (linux/amd64,linux/arm64 on main) pushed to Docker Hub via the static DOCKER_HUB_USERNAME/DOCKER_HUB_ACCESS_TOKEN secret, plus a github-release attaching the multi-arch executables as a 7z. Release is two-phase (workflow_dispatch + weekly Mon 02:00 schedule).", "Fully onboarded 2026-07 (rulesets, repo-config/, version.json, WORKFLOW.md, AUDIT.md, dependabot.yml, and the release pipeline all live). The reports/photocleaner/audit.md snapshot predates the docker/release wiring."] }, { "name": "MediaTools",