Skip to content

ci: kit refresh (cache, pins, concurrency) - #3

Merged
jensteblick merged 1 commit into
mainfrom
ci/phase7-kit-refresh
Aug 29, 2026
Merged

jensteblick merged 1 commit into
mainfrom
ci/phase7-kit-refresh

Conversation

@jensteblick

Copy link
Copy Markdown
Contributor

Re-apply the veton-handbook kit at 93549ad (Phase 7 "Everywhere") to .github/workflows/ci.yml:

  • gitleaks tarball cached with actions/cache (key gitleaks-<version>-<sha256>), 3x curl retry on a miss, sha256 verified on every run
  • every action pinned to a full commit SHA (# vX.Y.Z comment): checkout v4.4.0, cache v4.3.0, setup-node v4.4.0 / setup-python v5.6.0 / setup-go v5.6.0 where used
  • permissions: contents: read, concurrency ci-${{ github.workflow }}-${{ github.ref }} (cancel-in-progress), timeout-minutes: 20
  • .claude/hooks/guard.sh (release-tag push rule), .githooks/pre-commit, .gitleaks.toml (sshpass placeholder allowlist) refreshed to the kit copies; .gitleaksignore untouched

Repo-specific steps preserved: Python 3.13, cache-dependency-path requirements_test.txt, pytest via the kit ladder (requirements_test.txt matches requirements*.txt); ruff not listed so lint prints a ::warning:: SKIPPED; validate.yml (hassfest + HACS) untouched

YAML parsed + actionlint 1.7.12 clean locally.

🤖 Generated with Claude Code

https://claude.ai/code/session_0161NYdEAK1p8DYcnwnnmJdd

Re-apply veton-handbook kit 93549ad (Phase 7 "Everywhere"):
- gitleaks tarball cached via actions/cache (key = version + sha256), 3x retry on a miss,
  sha256 verified on EVERY run (cache hit or miss)
- every action pinned to a full commit SHA with a # vX.Y.Z comment
- permissions: contents: read, concurrency ci-<workflow>-<ref>, timeout-minutes 20
- .claude/hooks/guard.sh, .githooks/pre-commit, .gitleaks.toml refreshed to the kit copies
  (guard.sh: release-tag push rule; gitleaks: sshpass placeholder allowlist)
Repo-specific steps preserved unchanged (see the PR body).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0161NYdEAK1p8DYcnwnnmJdd
@qodo-code-review

Copy link
Copy Markdown

Qodo reviews are paused for this user.

Troubleshooting steps vary by plan Learn more →

On a Teams plan?
Reviews resume once this user has a paid seat and their Git account is linked in Qodo.
Link Git account →

Using GitHub Enterprise Server, GitLab Self-Managed, or Bitbucket Data Center?
These require an Enterprise plan - Contact us
Contact us →

@jensteblick
jensteblick merged commit 257b62c into main Aug 29, 2026
2 of 6 checks passed
@jensteblick
jensteblick deleted the ci/phase7-kit-refresh branch August 29, 2026 08:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant