KofTwentyTwo/Jarvis
2
0 Fork 0
Code Issues 111 Pull Requests 16 Actions Packages Projects Releases 4 Wiki Activity

ci(actions): full pipeline — build / test / scan / publish #154

Merged
KofTwentyTwo merged 4 commits from ci/github-actions-v0.1 into develop 2026-05-13 11:28:10 +00:00
Conversation 0 Commits 4 Files Changed 7
+590
4 Commits
Author SHA1 Message Date
james.maesandClaude Opus 4.7 35316fcce6 docs(building): CI/CD section — workflow map, branch/tag conventions, opt-in tests 
Documents the five GitHub Actions workflows, the feature/develop/rc/main
branch strategy, Conventional Commits version bumping, how to interpret a
failed boundary gate, how to opt into real-hardware tests, and the
optional SEMGREP_APP_TOKEN secret.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-12 16:46:11 -05:00
james.maesandClaude Opus 4.7 b86293cc17 ci(actions): release workflow + CODEOWNERS 
- release.yml: triggered by v* tag push; classifies vX.Y.Z-{dev,rc,...} as
  pre-release and vX.Y.Z as production. Auto-generates changelog from
  commits since the previous tag.
- CODEOWNERS: catch-all owner @KofTwentyTwo (sole maintainer).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-12 16:46:09 -05:00
james.maesandClaude Opus 4.7 64c981133d ci(actions): security scans — CodeQL, Semgrep, dependency review 
- codeql.yml: Swift + JavaScript/TypeScript with security-extended queries;
  PR + push + weekly cron. Swift build covers Bus/AgentCore/MCP packages
  as a representative subset.
- semgrep.yml: p/default + p/swift + p/typescript + p/secrets rule packs;
  optional SEMGREP_APP_TOKEN for Cloud posting, SARIF upload otherwise.
- dependency-review.yml: blocks high-severity vulnerable deps on PRs that
  touch package.json, pnpm-lock.yaml, Package.swift, or Package.resolved.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-12 16:46:02 -05:00
james.maesandClaude Opus 4.7 4384f470bb ci(actions): main CI workflow — boundary gates, SPM matrix, app build, tag publish 
Adds .github/workflows/ci.yml covering:
- Boundary gates (17 of 18 scripts/check-*.sh on Linux; check-app-builds.sh on macOS app job)
- Webview pnpm install + typecheck + vitest + build
- SPM matrix across all 14 packages on macos-15
- App target xcodebuild via scripts/check-app-builds.sh
- Optional real-hardware lane (self-hosted runner, workflow_dispatch opt-in)
- Tag publish on push to develop/rc/release/main with Conventional Commits version bump

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
 2026-05-12 16:45:54 -05:00