From c8f2cbde4a8088f8c69af274f731da5f6fc8f29e Mon Sep 17 00:00:00 2001
From: reachableceo <charles@turnsys.com>
Date: Fri, 4 Sep 2026 12:22:23 -0500
Subject: [PATCH] fix(ci): bookworm pip via apt, valid truthy nesting,
 runtime-file ignores [#784]

Red/green: run 1 failed 27s (no pip in node image); run 2 blocker was
invalid truthy nesting in .yamllint. Local repro now green.
https://projects.knownelement.com/issues/784
---
 .gitea/workflows/ci.yml | 2 +-
 .yamllint               | 5 ++++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 0ef2db9..f993cd9 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -13,7 +13,7 @@ jobs:
       - uses: actions/checkout@v4
       - name: yamllint
         run: |
-          pip install --quiet yamllint
+          apt-get update -qq >/dev/null && apt-get install -qq -y python3-pip >/dev/null && pip install --quiet --break-system-packages yamllint
           yamllint -c .yamllint .
       - name: secret scan
         run: |
diff --git a/.yamllint b/.yamllint
index 418c3c2..4148a69 100644
--- a/.yamllint
+++ b/.yamllint
@@ -3,12 +3,15 @@
 extends: default
 ignore: |
   docs/
+  secrets.yaml
+  *.db
 rules:
   line-length: disable
   comments: disable
   comments-indentation: disable
   document-start: disable
-  truthy: check-keys: false
+  truthy:
+    check-keys: false
   indentation:
     spaces: consistent
     indent-sequences: consistent