From d8db786e277d8a0609cf11b424b2b938ef07e18d Mon Sep 17 00:00:00 2001
From: Mathias Bergqvist <mthbqv@gmail.com>
Date: Thu, 7 May 2026 21:52:40 +0200
Subject: [PATCH] ci: add environment: staging gate to deploy job
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Aligns with cobalt-dingo reference — the deploy job was missing the
Gitea Actions environment protection so staging approvals/secrets were
not enforced.
---
 .gitea/workflows/cd.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.gitea/workflows/cd.yml b/.gitea/workflows/cd.yml
index 027d1cd..0b6c67e 100644
--- a/.gitea/workflows/cd.yml
+++ b/.gitea/workflows/cd.yml
@@ -95,6 +95,7 @@ jobs:
     needs: build
     runs-on: self-hosted
     if: github.ref == 'refs/heads/main' && github.event_name == 'push'
+    environment: staging
     steps:
       - name: Update image tag in infra repo
         env: