From 32a2cc7d9c4eefef1a6c224b07140ccfdf28ef9b Mon Sep 17 00:00:00 2001
From: Elton Turing <elton@42i.org>
Date: Tue, 8 Sep 2026 09:49:16 +0200
Subject: [PATCH] =?UTF-8?q?CI:=20SHA-K=C3=BCrzung=20POSIX-sicher?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Die Job-Shell ist sh -e; ${GITHUB_SHA:0:7} ist bash-Expansion und bricht
mit Bad substitution. printf '%.7s' statt Slice.
---
 .gitea/workflows/ci.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 6c6bd39..5bb9a26 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -89,7 +89,8 @@ jobs:
       - name: Build and push
         run: |
           # Nur linux/amd64: einziger Konsument ist der LXC auf x86.
-          SHA_TAG="git.42i.org/spine/llmrouter:sha-${GITHUB_SHA:0:7}"
+          # POSIX, kein bash-Slice: die Job-Shell ist sh -e.
+          SHA_TAG="git.42i.org/spine/llmrouter:sha-$(printf '%.7s' "$GITHUB_SHA")"
           docker buildx build \
             --builder "${BUILDER}" \
             --platform linux/amd64 \