From 6c5fad682f2d358a4295b509d9918aa26cb3c0f8 Mon Sep 17 00:00:00 2001
From: robert <robert@microcash.local>
Date: Tue, 2 Jun 2026 16:56:48 -0300
Subject: [PATCH] Pin reviewer deployment image and signing keys

---
 deploy/20-deployment.yaml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/deploy/20-deployment.yaml b/deploy/20-deployment.yaml
index 89b44d6..bd76469 100644
--- a/deploy/20-deployment.yaml
+++ b/deploy/20-deployment.yaml
@@ -27,7 +27,7 @@ spec:
       terminationGracePeriodSeconds: 30
       containers:
         - name: agent
-          image: registry.a2acloud.io/agents/agent-reviewer:latest
+          image: registry.a2acloud.io/agents/agent-reviewer:32cab7f29fff3ac7bda0cbbc3cbda5309fe69ded
           imagePullPolicy: Always
           ports:
             - containerPort: 8000
@@ -43,6 +43,12 @@ spec:
             - name: A2A_GRANT_VERIFYING_KEY
               valueFrom:
                 secretKeyRef: {name: platform-secrets, key: grant_verifying_key}
+            - name: A2A_RECEIPT_SIGNING_KEY
+              valueFrom:
+                secretKeyRef: {name: platform-secrets, key: receipt_signing_key, optional: true}
+            - name: A2A_REPLAY_SIGNING_KEY
+              valueFrom:
+                secretKeyRef: {name: platform-secrets, key: replay_signing_key, optional: true}
             - name: A2A_GITEA_INTERNAL
               value: http://gitea-http.gitea.svc.cluster.local:3000
             - name: A2A_GITEA_PUBLIC