The Customer Story video was already on this page, embedded from a third-party host. This swaps that embed for the same video on our own video server, matching the existing PeerTube embed in excel.md.
docs/videos.md - the Customer Story embed now points at https://vid.4gl.io/videos/embed/kpSGoNE26FSif8X9A6pUfe. Title and description unchanged. The local asset in docs/video/ is the same file (196s), so nothing else moves.
Verified with mkdocs build --clean: no new warnings, and the built videos/index.html carries the new embed URL.
The Customer Story video was already on this page, embedded from a third-party host. This swaps that embed for the same video on our own video server, matching the existing PeerTube embed in `excel.md`.
- `docs/videos.md` - the Customer Story embed now points at `https://vid.4gl.io/videos/embed/kpSGoNE26FSif8X9A6pUfe`. Title and description unchanged. The local asset in `docs/video/` is the same file (196s), so nothing else moves.
Verified with `mkdocs build --clean`: no new warnings, and the built `videos/index.html` carries the new embed URL.
Reviewed the iframe swap in docs/videos.md plus repo-level hardening checks (pre-commit hook, CI tooling).
Missing gitleaks pre-commit hook: no .pre-commit-config.yaml at the repo root. Standing all-repo requirement - add one with a gitleaks hook (id: gitleaks) pinned to an exact release tag (current release v8.30.1). Re-flagged on every review until it lands.
.gitea/workflows/publish.yml:46 - npx @marp-team/marp-cli runs unpinned, resolving the latest version at build time; same for the pip installs at lines 40-43 and npm -g install cloudron-surfer at line 36. Pre-existing, not introduced by this PR, but unpinned tool installs in the deploy pipeline are a supply-chain and reproducibility exposure - pin them to exact versions.
2 findings above for review.
Reviewed the iframe swap in docs/videos.md plus repo-level hardening checks (pre-commit hook, CI tooling).
- Missing gitleaks pre-commit hook: no .pre-commit-config.yaml at the repo root. Standing all-repo requirement - add one with a gitleaks hook (id: gitleaks) pinned to an exact release tag (current release v8.30.1). Re-flagged on every review until it lands.
- .gitea/workflows/publish.yml:46 - npx @marp-team/marp-cli runs unpinned, resolving the latest version at build time; same for the pip installs at lines 40-43 and npm -g install cloudron-surfer at line 36. Pre-existing, not introduced by this PR, but unpinned tool installs in the deploy pipeline are a supply-chain and reproducibility exposure - pin them to exact versions.
2 findings above for review.
allan
merged commit c5d6806d53 into main2026-10-11 10:29:07 +00:00
allan
deleted branch docs/customer-story-video2026-10-11 10:29:07 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
hermes
The Customer Story video was already on this page, embedded from a third-party host. This swaps that embed for the same video on our own video server, matching the existing PeerTube embed in
excel.md.docs/videos.md- the Customer Story embed now points athttps://vid.4gl.io/videos/embed/kpSGoNE26FSif8X9A6pUfe. Title and description unchanged. The local asset indocs/video/is the same file (196s), so nothing else moves.Verified with
mkdocs build --clean: no new warnings, and the builtvideos/index.htmlcarries the new embed URL.Reviewed the iframe swap in docs/videos.md plus repo-level hardening checks (pre-commit hook, CI tooling).
2 findings above for review.