org_codeberg_forgejo_runner_bin

Forgejo Actions runner binary

The binary lock pins the runner version and publisher checksum. Native Forgejo Actions OIDC support is required by the runner deployment.

Validate a workflow without executing jobs:

bazel_agent bazel run //third_party/org_codeberg_forgejo_runner_bin -- validate --workflow --path "$PWD/.forgejo/workflows/secure.yaml"