chore(governance): auto-seed org templates from Quantum-L9/.github - #38
chore(governance): auto-seed org templates from Quantum-L9/.github#38cryptoxdog wants to merge 1 commit into
Conversation
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 9502a09a08
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| node-version: ${{ env.NODE_VERSION }} | ||
| cache: ${{ env.PACKAGE_MANAGER }} |
There was a problem hiding this comment.
On every PR and push in this Python-only repository, both Node jobs reach this cache setting even though the tree contains no package.json or supported lockfile—the only project manifest is pyproject.toml. The setup-node documentation states that caching searches for package-lock.json, npm-shrinkwrap.json, or yarn.lock in the repository root (caching packages data); cache initialization fails when none exists, before the workflow's later skip checks. This therefore adds failing Node jobs to otherwise valid Python changes; either omit this workflow from this repository or condition the jobs on a Node manifest.
Useful? React with 👍 / 👎.
| if [ -f scripts/sync_ci_from_pack.py ]; then | ||
| python scripts/sync_ci_from_pack.py | ||
| else | ||
| echo "::notice::No sync_ci_from_pack.py found — skipping" | ||
| exit 0 |
There was a problem hiding this comment.
In this repository, a repo-wide file search finds no scripts/sync_ci_from_pack.py, so every org_template_updated dispatch and manual run takes this branch and exits successfully without changing anything. Consequently the advertised automatic synchronization can never create an update PR, allowing the newly copied governance and security templates to drift silently; seed the synchronizer with the workflow or fetch/invoke it from the canonical repository.
Useful? React with 👍 / 👎.
| REPOSITORY NOTICE: This LICENSE applies only to the Quantum-L9/.github | ||
| repository. GitHub does not propagate LICENSE files via org community-health | ||
| fallbacks. Other Quantum-L9 repositories should include their own LICENSE | ||
| file (this text may be used as the org template). |
There was a problem hiding this comment.
Because this file is installed as /workspace/l9-codegraph/LICENSE, the repository notice expressly saying that it applies only to Quantum-L9/.github excludes the current repository from the preceding license grant. Users of l9-codegraph therefore cannot rely on the root license to determine their rights; replace the repository-specific notice with one that names l9-codegraph or otherwise makes the template applicable to each consumer repository.
Useful? React with 👍 / 👎.
7148454 to
5b25f49
Compare
5b25f49 to
9f58c3b
Compare
1 participant
Automatically seeds org template files from
Quantum-L9/.github/templates/plus thel9-ci-pack/Core hub.Files in this PR
.github/CODEOWNERS.github/workflows/governance.yml.github/labels.ymlCODE_OF_CONDUCT.mdCONTRIBUTING.mdSECURITY.mdSUPPORT.mdLICENSE.github/FUNDING.yml.github/ISSUE_TEMPLATE/1-bug.yml.github/ISSUE_TEMPLATE/2-feature.yml.github/ISSUE_TEMPLATE/3-task.yml.github/ISSUE_TEMPLATE/4-incident.yml.github/ISSUE_TEMPLATE/bug_report.yml.github/ISSUE_TEMPLATE/ci-failure.yml.github/ISSUE_TEMPLATE/config.yml.github/ISSUE_TEMPLATE/feature_request.yml.github/ISSUE_TEMPLATE/gov-violation.yml.github/pull_request_template.md.github/workflows/on-org-update.yml.github/workflows/l9-analysis.yml.github/workflows/l9-lint-test-node.yml.github/workflows/l9-lint-test.yml.github/governance/execution-profiles.yaml.github/governance/promotion-policy.yaml.github/governance/provider-requiredness.yaml.github/governance/quality-thresholds.yaml.github/governance/rule-modes.yaml.github/governance/waivers.yamlbiome.json.biomeignore.editorconfig.vscode/extensions.jsonExisting files were left untouched (missing-only seed), except a stock ESLint
l9-lint-test-node.ymlwhich is replaced with the Biome SDK caller.Governance caller is advisory (
strictdefaults false).Core pack callers are distributed here;
l9-ci-coreexecutes CI.Opened automatically by Quantum-L9/.github auto-seed.