Skip to content

chore(governance): auto-seed org templates from Quantum-L9/.github - #2

Open
cryptoxdog wants to merge 1 commit into
mainfrom
chore/auto-seed-governance
Open

chore(governance): auto-seed org templates from Quantum-L9/.github#2
cryptoxdog wants to merge 1 commit into
mainfrom
chore/auto-seed-governance

Conversation

@cryptoxdog

Copy link
Copy Markdown
Contributor

Automatically seeds org template files from Quantum-L9/.github/templates/ plus the l9-ci-pack/ Core hub.

Files in this PR

  • .github/CODEOWNERS
  • .github/dependabot.yml
  • .github/workflows/governance.yml
  • .github/labels.yml
  • CODE_OF_CONDUCT.md
  • CONTRIBUTING.md
  • SECURITY.md
  • SUPPORT.md
  • LICENSE
  • .github/FUNDING.yml
  • .github/ISSUE_TEMPLATE/1-bug.yml
  • .github/ISSUE_TEMPLATE/2-feature.yml
  • .github/ISSUE_TEMPLATE/3-task.yml
  • .github/ISSUE_TEMPLATE/4-incident.yml
  • .github/ISSUE_TEMPLATE/bug_report.yml
  • .github/ISSUE_TEMPLATE/ci-failure.yml
  • .github/ISSUE_TEMPLATE/config.yml
  • .github/ISSUE_TEMPLATE/feature_request.yml
  • .github/ISSUE_TEMPLATE/gov-violation.yml
  • .github/pull_request_template.md
  • .github/workflows/on-org-update.yml
  • .github/workflows/l9-analysis.yml
  • .github/workflows/l9-lint-test-node.yml
  • .github/workflows/l9-lint-test.yml
  • .github/governance/execution-profiles.yaml
  • .github/governance/promotion-policy.yaml
  • .github/governance/provider-requiredness.yaml
  • .github/governance/quality-thresholds.yaml
  • .github/governance/rule-modes.yaml
  • .github/governance/waivers.yaml
  • biome.json
  • .biomeignore
  • .editorconfig
  • .vscode/extensions.json

Existing files were left untouched (missing-only seed), except a stock ESLint l9-lint-test-node.yml which is replaced with the Biome SDK caller.
Governance caller is advisory (strict defaults false).
Core pack callers are distributed here; l9-ci-core executes CI.

Opened automatically by Quantum-L9/.github auto-seed.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 848bb5667e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

run: |
set -euo pipefail
case "${PACKAGE_MANAGER}" in
npm) if [ -f package-lock.json ]; then npm ci; else npm install; fi ;;

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Disable the Node workflow for this Python-only repository

This workflow runs on every PR and push even though a repo-wide file scan finds no package.json or JavaScript lockfile. Consequently, both jobs select the npm branch and npm install exits with ENOENT while trying to open package.json, making the newly activated workflow fail for every revision; remove/disable this template here or guard the jobs on the presence of a Node manifest.

Useful? React with 👍 / 👎.

Comment on lines +110 to +111
pip install -e ".[dev]" || pip install -e . || \
echo "::notice::no local editable package to install"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Install the dependencies required by the test suite

On a fresh runner this branch always reaches the notice because the repository has no requirements-ci.txt, pyproject.toml, setup.py, or setup.cfg, after which only pytest plugins are installed. The suite imports both yaml and jsonschema (including from the governing-template fixture), so the subsequent pytest step fails with ModuleNotFoundError rather than testing the project; explicitly install PyYAML and jsonschema or add and consume a project dependency manifest.

Useful? React with 👍 / 👎.

Comment on lines +73 to +74
- name: ruff format --check
run: ruff format --check .

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Format the tree before enforcing Ruff's format check

The newly enabled lint job cannot pass against the committed tree: running its exact ruff format --check . command reports that 11 existing Python files would be reformatted and exits 1. Ruff's help confirms that --check exits nonzero whenever files would be modified, so every PR receives a failed lint job until the files are formatted or the check is scoped/configured to match the repository.

Useful? React with 👍 / 👎.

Comment on lines +77 to +79
mypy "${SOURCE_DIR}" \
--show-error-codes --pretty \
--install-types --non-interactive --ignore-missing-imports

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Exclude the duplicate fixture module from the mypy run

With SOURCE_DIR set to ., mypy recursively scans both scripts/validate_devpack.py and tests/fixtures/dpk_mini/scripts/validate_devpack.py; running this exact command exits 2 with Duplicate module named "validate_devpack". The lint workflow therefore remains red even after formatting is fixed unless the fixture is excluded or package/module discovery is configured explicitly.

Useful? React with 👍 / 👎.

@cryptoxdog
cryptoxdog force-pushed the chore/auto-seed-governance branch 14 times, most recently from c208d10 to 6a03e63 Compare August 22, 2026 06:32
@cryptoxdog
cryptoxdog force-pushed the chore/auto-seed-governance branch from 6a03e63 to 13fe1b2 Compare August 22, 2026 07:20
@sonarqubecloud

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant