chore(governance): auto-seed org templates from Quantum-L9/.github - #222
chore(governance): auto-seed org templates from Quantum-L9/.github#222cryptoxdog wants to merge 1 commit into
Conversation
|
❌ PR Too Large 📋 Best Practices for Large Changes
🚫 This PR is blocked until reviewable size limits are met. |
L9 Audit Harness Report
Step Results
Architecture Audit Findings
See Spec Coverage
See Next StepsAll checks passed. Safe to merge. |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| @@ -0,0 +1,33 @@ | |||
| # Managed by Quantum-L9/.github. Pinned to a tag so main can move safely. | |||
| workflow_dispatch: | ||
|
|
||
| permissions: | ||
| contents: write |
| run: | | ||
| set -euo pipefail | ||
| case "${PACKAGE_MANAGER}" in | ||
| npm) if [ -f package-lock.json ]; then npm ci; else npm install; fi ;; |
| run: | | ||
| set -euo pipefail | ||
| case "${PACKAGE_MANAGER}" in | ||
| npm) if [ -f package-lock.json ]; then npm ci; else npm install; fi ;; |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: bd461ddab4
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 | ||
| with: | ||
| node-version: ${{ env.NODE_VERSION }} | ||
| cache: ${{ env.PACKAGE_MANAGER }} |
There was a problem hiding this comment.
On every pull request and push to main, both jobs invoke setup-node with npm caching, but a repo-wide search finds no package-lock.json, npm-shrinkwrap.json, yarn.lock, or even package.json. The pinned action's caching documentation states that it searches the repository root for a dependency lockfile whose hash forms the cache key; without one, setup fails before the later TypeScript/test guards can skip their work. This therefore adds failing CI jobs to this Python-only project; omit the Node preset or disable caching unless an applicable lockfile exists.
AGENTS.md reference: AGENTS.md:L83-L88
Useful? React with 👍 / 👎.
| if [ -f scripts/sync_ci_from_pack.py ]; then | ||
| python scripts/sync_ci_from_pack.py | ||
| else | ||
| echo "::notice::No sync_ci_from_pack.py found — skipping" | ||
| exit 0 |
There was a problem hiding this comment.
For every org_template_updated dispatch in the reviewed tree, this condition is false: repo-wide searches of both this commit and its parent find no scripts/sync_ci_from_pack.py, and no other step fetches or synchronizes the org templates. The workflow consequently exits successfully without changing anything or opening the advertised sync PR, making the automatic-update feature a permanent no-op until the script or an equivalent shared action is included.
Useful? React with 👍 / 👎.
| `Quantum-L9/.github` validates itself on every PR/push to `main` — note that | ||
| none of the 12 files under `workflow-templates/` ever run as CI *in this | ||
| repo*; they only appear as starter-workflow choices in other repos' Actions | ||
| tab. What actually executes here: |
There was a problem hiding this comment.
This section describes the current repository as Quantum-L9/.github and directs contributors to workflow-templates/, validate-starters.sh, actionlint.yml, and l9-ci-pack/; repo-wide inspection confirms those paths do not exist here. Cognitive Engine Graphs instead uses Python engine gates such as ruff, mypy, pytest, and the contract scanner, so this documentation gives contributors incorrect validation and merge criteria and should be replaced with the actual CEG workflow.
AGENTS.md reference: AGENTS.md:L16-L19
Useful? React with 👍 / 👎.
d5b339f to
0604fc6
Compare
daaac9e to
a715564
Compare
a715564 to
27bbb5d
Compare
|
2 participants
Automatically seeds org template files from
Quantum-L9/.github/templates/plus thel9-ci-pack/Core hub.Files in this PR
.github/workflows/governance.yml.github/labels.ymlCODE_OF_CONDUCT.mdCONTRIBUTING.mdSUPPORT.md.github/FUNDING.yml.github/ISSUE_TEMPLATE/1-bug.yml.github/ISSUE_TEMPLATE/2-feature.yml.github/ISSUE_TEMPLATE/3-task.yml.github/ISSUE_TEMPLATE/4-incident.yml.github/ISSUE_TEMPLATE/bug_report.yml.github/ISSUE_TEMPLATE/ci-failure.yml.github/ISSUE_TEMPLATE/config.yml.github/ISSUE_TEMPLATE/feature_request.yml.github/ISSUE_TEMPLATE/gov-violation.yml.github/pull_request_template.md.github/workflows/on-org-update.yml.github/workflows/l9-lint-test-node.ymlbiome.json.biomeignore.vscode/extensions.jsonExisting files were left untouched (missing-only seed), except a stock ESLint
l9-lint-test-node.ymlwhich is replaced with the Biome SDK caller.Governance caller is advisory (
strictdefaults false).Core pack callers are distributed here;
l9-ci-coreexecutes CI.Opened automatically by Quantum-L9/.github auto-seed.