From 32da5410bc6c47f762097edc01075b7a55d6c9d7 Mon Sep 17 00:00:00 2001
From: Alexandre Pires <c.alexandre.pires@alexpires.me>
Date: Sun, 5 Jul 2026 23:22:32 +0200
Subject: [PATCH 1/2] Added the a13labs namespace to scaleway

---
 terraform/iac/scaleway/iam.tf      | 22 ++++++++++++++++++++++
 terraform/iac/scaleway/outputs.tf  | 17 +++++++++++++++++
 terraform/iac/scaleway/registry.tf |  2 +-
 3 files changed, 40 insertions(+), 1 deletion(-)

diff --git a/terraform/iac/scaleway/iam.tf b/terraform/iac/scaleway/iam.tf
index 1be7fb8..fb3d510 100644
--- a/terraform/iac/scaleway/iam.tf
+++ b/terraform/iac/scaleway/iam.tf
@@ -96,3 +96,25 @@ resource "scaleway_iam_api_key" "gitea_app_api" {
   application_id = scaleway_iam_application.gitea_app.id
   description    = "gitea access API key"
 }
+
+resource "scaleway_iam_application" "ci_app" {
+  name = "ci_app"
+}
+
+resource "scaleway_iam_policy" "registry_full_access" {
+  name           = "CI Registry full access policy"
+  description    = "Gives CI app full access to container registry in project"
+  application_id = scaleway_iam_application.ci_app.id
+
+  rule {
+    project_ids = [data.scaleway_account_project.default.id]
+    permission_set_names = [
+      "RegistryFullAccess",
+    ]
+  }
+}
+
+resource "scaleway_iam_api_key" "ci_app_api" {
+  application_id = scaleway_iam_application.ci_app.id
+  description    = "CI app API key for registry push"
+}
diff --git a/terraform/iac/scaleway/outputs.tf b/terraform/iac/scaleway/outputs.tf
index 45f04e6..46556a6 100644
--- a/terraform/iac/scaleway/outputs.tf
+++ b/terraform/iac/scaleway/outputs.tf
@@ -49,3 +49,20 @@ output "gitea_bucket_name" {
   description = "The name of the Gitea bucket."
   value       = scaleway_object_bucket.gitea.name
 }
+
+output "registry_endpoint" {
+  description = "The endpoint of the a13labs container registry."
+  value       = scaleway_registry_namespace.a13labs.endpoint
+}
+
+output "ci_app_api_access_key" {
+  description = "The access key for the CI app API."
+  value       = scaleway_iam_api_key.ci_app_api.access_key
+  sensitive   = true
+}
+
+output "ci_app_api_secret_key" {
+  description = "The secret key for the CI app API."
+  value       = scaleway_iam_api_key.ci_app_api.secret_key
+  sensitive   = true
+}
diff --git a/terraform/iac/scaleway/registry.tf b/terraform/iac/scaleway/registry.tf
index 292205a..2c46229 100644
--- a/terraform/iac/scaleway/registry.tf
+++ b/terraform/iac/scaleway/registry.tf
@@ -1,5 +1,5 @@
 resource "scaleway_registry_namespace" "a13labs" {
   name        = "a13labs"
   description = "A13Labs container registry"
-  is_public   = false
+  is_public   = true
 }
-- 
2.52.0


From 33cccdf396b7a8e1e20e3d33c54e8dfc93a7cf14 Mon Sep 17 00:00:00 2001
From: Alexandre Pires <c.alexandre.pires@alexpires.me>
Date: Mon, 6 Jul 2026 21:14:24 +0200
Subject: [PATCH 2/2] Fix sectool installation step by removing version check

---
 .gitea/actions/setup-sectool/action.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.gitea/actions/setup-sectool/action.yml b/.gitea/actions/setup-sectool/action.yml
index 2828622..617e8d5 100644
--- a/.gitea/actions/setup-sectool/action.yml
+++ b/.gitea/actions/setup-sectool/action.yml
@@ -12,5 +12,4 @@ runs:
         curl -sL "$ASSET_URL" -o /tmp/sectool.zip
         unzip -o /tmp/sectool.zip -d /usr/local/bin
         rm /tmp/sectool.zip
-        chmod +x /usr/local/bin/sectool
-        sectool version
+        chmod +x /usr/local/bin/sectool
\ No newline at end of file
-- 
2.52.0