Dylan M. Taylor 3d49e352fa apt: stop SRV lookups; give the FreeBSD VM host the fallback mirrors (#200) ...

Harden-Runner blocked apt's SRV lookups (_https._tcp.mirrors.edge.kernel.org,
_https._tcp.mirrors.dotsrc.org): the allow lists name the hosts, not their
SRV records. configure-apt-mirrors now sets Acquire::EnableSrvRecords false;
apt connects to the hosts directly either way.

The FreeBSD workflow's VM action apt-installs QEMU on the host, which failed
during the ubuntu.com outage (sudo exit 100) and reached packages.microsoft.com.
Run configure-apt-mirrors first and drop the image's Microsoft source, which
the job never installs from.

2026-11-11 10:26:48 -05:00

..

workflows

apt: stop SRV lookups; give the FreeBSD VM host the fallback mirrors (#200)

2026-11-11 10:26:48 -05:00

dependabot.yml

ci: harden workflows with credential isolation, template injection defenses, and dependabot cooldown (#191)

2026-11-10 18:07:38 -05:00