Skip to content

chore(governance): auto-seed org templates from Quantum-L9/.github - #10

Open
cryptoxdog wants to merge 1 commit into
mainfrom
chore/auto-seed-governance
Open

chore(governance): auto-seed org templates from Quantum-L9/.github#10
cryptoxdog wants to merge 1 commit into
mainfrom
chore/auto-seed-governance

Conversation

@cryptoxdog

Copy link
Copy Markdown
Collaborator

Automatically seeds org template files from Quantum-L9/.github/templates/ plus the l9-ci-pack/ Core hub.

Files in this PR

  • .github/dependabot.yml
  • .github/workflows/governance.yml
  • .github/labels.yml
  • CODE_OF_CONDUCT.md
  • CONTRIBUTING.md
  • SECURITY.md
  • SUPPORT.md
  • .github/FUNDING.yml
  • .github/ISSUE_TEMPLATE/1-bug.yml
  • .github/ISSUE_TEMPLATE/2-feature.yml
  • .github/ISSUE_TEMPLATE/3-task.yml
  • .github/ISSUE_TEMPLATE/4-incident.yml
  • .github/ISSUE_TEMPLATE/bug_report.yml
  • .github/ISSUE_TEMPLATE/ci-failure.yml
  • .github/ISSUE_TEMPLATE/config.yml
  • .github/ISSUE_TEMPLATE/feature_request.yml
  • .github/ISSUE_TEMPLATE/gov-violation.yml
  • .github/pull_request_template.md
  • .github/workflows/on-org-update.yml
  • .github/workflows/l9-analysis.yml
  • .github/workflows/l9-lint-test-node.yml
  • .github/workflows/l9-lint-test.yml
  • .github/governance/execution-profiles.yaml
  • .github/governance/promotion-policy.yaml
  • .github/governance/provider-requiredness.yaml
  • .github/governance/quality-thresholds.yaml
  • .github/governance/rule-modes.yaml
  • .github/governance/waivers.yaml
  • biome.json
  • .biomeignore
  • .editorconfig
  • .vscode/extensions.json

Existing files were left untouched (missing-only seed), except a stock ESLint l9-lint-test-node.yml which is replaced with the Biome SDK caller.
Governance caller is advisory (strict defaults false).
Core pack callers are distributed here; l9-ci-core executes CI.

Opened automatically by Quantum-L9/.github auto-seed.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5f48853d11

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

command -v ruff >/dev/null 2>&1 || pip install ruff
command -v mypy >/dev/null 2>&1 || pip install mypy
- name: ruff check
run: ruff check . --output-format=github

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Scope linting to the nested Python project

On every pull request and push, this job runs from the repository root, whereas the existing CI deliberately uses constellation-gate as its working directory. Consequently, ruff check . includes the pre-existing root scripts/validate_sdk_pin.py, which fails with E702 on line 12, and mypy . bypasses the nested pyproject.toml configuration and reports errors throughout tests and scripts. Set the working directory or explicitly scope both commands to the nested project, otherwise this workflow remains red independently of the application changes.

Useful? React with 👍 / 👎.

env:
PYTHON_VERSION: "3.12"
SOURCE_DIR: "."
TEST_DIR: "tests/"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Point pytest at the nested test suite

TEST_DIR is resolved from the checkout root, but the repository has no root tests/ directory; its suite is under constellation-gate/tests. Thus every invocation reaches pytest tests/, which exits with code 4 (file or directory not found) before running any tests. Configure the nested path or run this job from constellation-gate.

Useful? React with 👍 / 👎.

uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
with:
node-version: ${{ env.NODE_VERSION }}
cache: ${{ env.PACKAGE_MANAGER }}

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Remove the Node workflow from this Python-only repository

A repo-wide manifest search finds no package.json or npm lockfile, yet both Node jobs enable setup-node's npm cache. That cache setup requires locating a supported dependency lockfile and fails before the later guards that skip missing tsconfig.json or test scripts, so this newly activated workflow produces failed checks on every pull request and push. Omit or disable the Node template unless a Node project is actually present.

Useful? React with 👍 / 👎.

Comment thread .github/dependabot.yml
update-types: ["minor", "patch"]

- package-ecosystem: pip
directory: "/"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Configure Dependabot for the nested Python manifest

The actual Python dependency manifest is constellation-gate/pyproject.toml, while the root contains only requirements-ci.txt pointing at that local editable package. Dependabot's pip update directory is not recursive, so configuring / will not update dependencies declared in the nested pyproject.toml, including FastAPI, Pydantic, and HTTPX. Set this directory to /constellation-gate.

Useful? React with 👍 / 👎.

@cryptoxdog
cryptoxdog force-pushed the chore/auto-seed-governance branch 29 times, most recently from 170b366 to f3cdfb2 Compare August 22, 2026 08:49
@cryptoxdog
cryptoxdog force-pushed the chore/auto-seed-governance branch 3 times, most recently from 0c4ba16 to bed0632 Compare August 22, 2026 10:19
@cryptoxdog
cryptoxdog force-pushed the chore/auto-seed-governance branch from bed0632 to db3c45d Compare August 22, 2026 11:03
@sonarqubecloud

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant