Skip to content

chore(governance): auto-seed org templates from Quantum-L9/.github - #32

Open
cryptoxdog wants to merge 1 commit into
mainfrom
chore/auto-seed-governance
Open

chore(governance): auto-seed org templates from Quantum-L9/.github#32
cryptoxdog wants to merge 1 commit into
mainfrom
chore/auto-seed-governance

Conversation

@cryptoxdog

Copy link
Copy Markdown
Contributor

Automatically seeds org template files from Quantum-L9/.github/templates/ plus the l9-ci-pack/ Core hub.

Files in this PR

  • .github/CODEOWNERS
  • .github/dependabot.yml
  • .github/workflows/governance.yml
  • .github/labels.yml
  • CODE_OF_CONDUCT.md
  • CONTRIBUTING.md
  • SECURITY.md
  • SUPPORT.md
  • LICENSE
  • .github/FUNDING.yml
  • .github/ISSUE_TEMPLATE/1-bug.yml
  • .github/ISSUE_TEMPLATE/2-feature.yml
  • .github/ISSUE_TEMPLATE/3-task.yml
  • .github/ISSUE_TEMPLATE/4-incident.yml
  • .github/ISSUE_TEMPLATE/bug_report.yml
  • .github/ISSUE_TEMPLATE/ci-failure.yml
  • .github/ISSUE_TEMPLATE/config.yml
  • .github/ISSUE_TEMPLATE/feature_request.yml
  • .github/ISSUE_TEMPLATE/gov-violation.yml
  • .github/pull_request_template.md
  • .github/workflows/on-org-update.yml
  • .github/workflows/l9-analysis.yml
  • .github/workflows/l9-lint-test-node.yml
  • .github/workflows/l9-lint-test.yml
  • .github/governance/execution-profiles.yaml
  • .github/governance/promotion-policy.yaml
  • .github/governance/provider-requiredness.yaml
  • .github/governance/quality-thresholds.yaml
  • .github/governance/rule-modes.yaml
  • .github/governance/waivers.yaml
  • biome.json
  • .biomeignore
  • .editorconfig
  • .vscode/extensions.json

Existing files were left untouched (missing-only seed), except a stock ESLint l9-lint-test-node.yml which is replaced with the Biome SDK caller.
Governance caller is advisory (strict defaults false).
Core pack callers are distributed here; l9-ci-core executes CI.

Opened automatically by Quantum-L9/.github auto-seed.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ac36405fe4

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

run: |
set -euo pipefail
case "${PACKAGE_MANAGER}" in
npm) if [ -f package-lock.json ]; then npm ci; else npm install; fi ;;

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Skip the Node workflow when no Node project exists

This workflow runs on every pull request and push, but this repository contains no package.json or Node lockfile, so both the typecheck and test jobs reach this branch and fail at npm install; npm 11.4.2 reports ENOENT ... Could not read package.json for this invocation. Gate the jobs on the presence of a Node manifest or do not seed this active Node workflow into this Python-only repository.

Useful? React with 👍 / 👎.

# ── Consumer config: edit these values for your repo ───────────────────────────
env:
PYTHON_VERSION: "3.12"
SOURCE_DIR: "."

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Scope mypy to the package sources

Passing SOURCE_DIR="." as mypy's positional target overrides the existing pyproject.toml scope of src and tests and pulls the intentionally excluded legacy runtime/ scripts into strict checking. Running the workflow's command against this commit reports 64 errors in 21 files, so the newly enabled lint job fails every pull request even though the repository's established mypy gate is scoped correctly; set this to the actual typed sources or omit the positional target.

Useful? React with 👍 / 👎.

Comment on lines +29 to +33
if [ -f scripts/sync_ci_from_pack.py ]; then
python scripts/sync_ci_from_pack.py
else
echo "::notice::No sync_ci_from_pack.py found — skipping"
exit 0

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Include the sync implementation before enabling dispatches

In the reviewed commit, a repo-wide search finds scripts/sync_ci_from_pack.py only in this conditional and no implementation is present, so every org_template_updated dispatch exits successfully without syncing anything or opening a PR. This silently defeats the workflow's stated auto-sync purpose and allows governance templates to drift; seed the script with the receiver or make the workflow fetch and execute the centrally maintained implementation.

Useful? React with 👍 / 👎.

Comment thread LICENSE
Comment on lines +99 to +102
REPOSITORY NOTICE: This LICENSE applies only to the Quantum-L9/.github
repository. GitHub does not propagate LICENSE files via org community-health
fallbacks. Other Quantum-L9 repositories should include their own LICENSE
file (this text may be used as the org template).

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Make the copied license apply to this repository

The newly added LICENSE is installed in l9-cognitive-runtime, but this notice expressly says it applies only to the separate Quantum-L9/.github repository and directs other repositories to include their own license. That disclaims the preceding limited grant for the code actually being distributed here, leaving users without a coherent repository license; replace this source-template notice with wording naming the current repository.

Useful? React with 👍 / 👎.

@cryptoxdog
cryptoxdog force-pushed the chore/auto-seed-governance branch 8 times, most recently from 6c20a76 to 24a7000 Compare August 21, 2026 21:28
@cryptoxdog
cryptoxdog force-pushed the chore/auto-seed-governance branch from 24a7000 to 0ed186a Compare August 21, 2026 22:10
@sonarqubecloud

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant