From cad3213dad605f1547ef8896cf8711df5f8694da Mon Sep 17 00:00:00 2001
From: jutty <j@jutty.dev>
Date: Sun, 22 Mar 2026 19:14:54 -0300
Subject: [PATCH] CI: Update publish workflow

---
 .forgejo/workflows/publish.yaml | 11 ++++++++---
 .justfile                       |  2 +-
 2 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/.forgejo/workflows/publish.yaml b/.forgejo/workflows/publish.yaml
index 04ab097..fc546f8 100644
--- a/.forgejo/workflows/publish.yaml
+++ b/.forgejo/workflows/publish.yaml
@@ -10,8 +10,7 @@ jobs:
       image: rust:slim
     steps:
       - name: Install action dependencies
-        run: |
-          apt-get install --no-install-recommends --update -y nodejs curl git
+        run: apt-get install --no-install-recommends --update -y nodejs curl git
 
       - name: Checkout code
         uses: actions/checkout@v6
@@ -22,13 +21,19 @@ jobs:
         run: |
           rustup component add llvm-tools-preview
           rustup component add --toolchain nightly rustfmt clippy
+          rustup target add x86_64-unknown-linux-gnu
           rustup target add x86_64-unknown-linux-musl
 
       - name: Setup additional tooling
         run: .forgejo/workflows/setup-tools.sh
 
+      - name: Setup CI user
+        run: |
+          useradd -m ci && chown -R ci:ci .
+          git config --global --add safe.directory "$PWD"
+
       - name: Run all assessments
-        run: just verify
+        run: just ci verify
 
       - name: Build x64 glibc release binary
         run: just release-build x86_64-unknown-linux-gnu
diff --git a/.justfile b/.justfile
index 7c9d28a..92e5a80 100644
--- a/.justfile
+++ b/.justfile
@@ -360,7 +360,7 @@ alias sa := security-assess
 # Find TODOs
 [group: 'assess']
 todos-assess:
-    ! rg -M 200 --max-columns-preview TODO src
+    ! grep -rn TODO src
 
 alias ta := todos-assess