fixed gitignore

.gitea/workflows/container.yml

@@ -22,7 +22,9 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Fetch AtlasHorizon CAs
-        run: sh scripts/refresh-certs.sh
+        run: |
+          sh scripts/refresh-certs.sh
+          ls -l certs/*.crt
 
       - name: Registry and image names
         run: |
@@ -69,6 +71,8 @@ jobs:
           username: ${{ secrets.REGISTRY_USERNAME || github.actor }}
           password: ${{ secrets.REGISTRY_TOKEN }}
 
+      # source: . is required so gitignored certs from refresh-certs.sh
+      # are in the build context. The default Git context only has the commit.
       - name: Build and push
         uses: docker/bake-action@v6
         env:
@@ -77,6 +81,7 @@ jobs:
           SHA: ${{ env.SHA }}
           MANUAL: ${{ env.MANUAL }}
         with:
+          source: .
           files: docker-bake.hcl
           push: ${{ github.event_name != 'pull_request' }}
           provenance: false