chore(governance): auto-seed org templates from Quantum-L9/.github - #227
chore(governance): auto-seed org templates from Quantum-L9/.github#227cryptoxdog wants to merge 1 commit into
Conversation
27bbb5d to
0c3a6e7
Compare
|
❌ PR Too Large 📋 Best Practices for Large Changes
🚫 This PR is blocked until reviewable size limits are met. |
L9 Audit Harness Report
Step Results
Architecture Audit Findings
See Spec Coverage
See Next StepsAll checks passed. Safe to merge. |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| @@ -0,0 +1,33 @@ | |||
| # Managed by Quantum-L9/.github. Pinned to a tag so main can move safely. | |||
| workflow_dispatch: | ||
|
|
||
| permissions: | ||
| contents: write |
| run: | | ||
| set -euo pipefail | ||
| case "${PACKAGE_MANAGER}" in | ||
| npm) if [ -f package-lock.json ]; then npm ci; else npm install; fi ;; |
| run: | | ||
| set -euo pipefail | ||
| case "${PACKAGE_MANAGER}" in | ||
| npm) if [ -f package-lock.json ]; then npm ci; else npm install; fi ;; |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 0c3a6e7672
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| - name: Set up Node | ||
| uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 | ||
| with: | ||
| node-version: ${{ env.NODE_VERSION }} | ||
| cache: ${{ env.PACKAGE_MANAGER }} |
There was a problem hiding this comment.
On every pull request and push to main, both Node jobs enable the npm cache even though a repo-wide search finds no package.json, package-lock.json, npm-shrinkwrap.json, or yarn.lock. The pinned setup-node documentation states that caching searches the repository root for a dependency file, so setup fails with a missing-lockfile error before the later no-tsconfig.json/no-test-script skip logic can run. Remove this Node preset or condition the jobs and caching on an actual Node manifest.
AGENTS.md reference: AGENTS.md:L16-L19
Useful? React with 👍 / 👎.
| if [ -f scripts/sync_ci_from_pack.py ]; then | ||
| python scripts/sync_ci_from_pack.py | ||
| else | ||
| echo "::notice::No sync_ci_from_pack.py found — skipping" | ||
| exit 0 |
There was a problem hiding this comment.
When either org_template_updated or the manual dispatch invokes this workflow, this branch always exits successfully without syncing anything: a repo-wide search confirms that scripts/sync_ci_from_pack.py is not present and there is no other template-sync implementation. Consequently the diff remains empty and the advertised auto-sync PR is never created; include the sync script or fetch and execute the synchronization logic directly.
Useful? React with 👍 / 👎.
| ## This Repo's Own CI | ||
|
|
||
| `Quantum-L9/.github` validates itself on every PR/push to `main` — note that | ||
| none of the 12 files under `workflow-templates/` ever run as CI *in this | ||
| repo*; they only appear as starter-workflow choices in other repos' Actions |
There was a problem hiding this comment.
This section identifies the current repository as Quantum-L9/.github and tells contributors that its CI validates workflow-templates/, l9-ci-pack/, .github/workflows/actionlint.yml, and ops/audit-sha-pins.sh. A repo-wide check shows that none of those paths exists in CEG, whose documented stack and test commands are Python-specific, so contributors following this guide cannot run or inspect the claimed gates. Replace this copied section with the actual CEG workflows and commands.
AGENTS.md reference: AGENTS.md:L16-L29
Useful? React with 👍 / 👎.
0c3a6e7 to
bf1beec
Compare
|
2 participants
Automatically seeds org template files from
Quantum-L9/.github/templates/plus thel9-ci-pack/Core hub.Files in this PR
.github/workflows/governance.yml.github/labels.ymlCODE_OF_CONDUCT.mdCONTRIBUTING.mdSUPPORT.md.github/FUNDING.yml.github/ISSUE_TEMPLATE/1-bug.yml.github/ISSUE_TEMPLATE/2-feature.yml.github/ISSUE_TEMPLATE/3-task.yml.github/ISSUE_TEMPLATE/4-incident.yml.github/ISSUE_TEMPLATE/bug_report.yml.github/ISSUE_TEMPLATE/ci-failure.yml.github/ISSUE_TEMPLATE/config.yml.github/ISSUE_TEMPLATE/feature_request.yml.github/ISSUE_TEMPLATE/gov-violation.yml.github/pull_request_template.md.github/workflows/on-org-update.yml.github/workflows/l9-lint-test-node.ymlbiome.json.biomeignore.vscode/extensions.jsonExisting files were left untouched (missing-only seed), except a stock ESLint
l9-lint-test-node.ymlwhich is replaced with the Biome SDK caller.Governance caller is advisory (
strictdefaults false).Core pack callers are distributed here;
l9-ci-coreexecutes CI.Opened automatically by Quantum-L9/.github auto-seed.