Jarvis/.github/CODEOWNERS at dependabot/github_actions/github/codeql-action-4 - Jarvis - KOF22 Forge

KofTwentyTwo/Jarvis

0 Fork 0

Files

T

james.maes 223310aa27 ci(actions): full pipeline — build / test / scan / publish (#154 )

Adds five GitHub Actions workflows + CODEOWNERS + BUILDING.md CI section.

- ci.yml: boundary gates (Ubuntu), webview pnpm test+build (Ubuntu), 14-package SPM matrix on macos-15, app target via xcodebuild, optional self-hosted real-hardware lane, semver tag-publish on push to develop/rc/release/main.
- codeql.yml: Swift + JS/TS with security-extended queries, weekly cron.
- semgrep.yml: p/default + p/swift + p/typescript + p/secrets, SARIF upload, optional SEMGREP_APP_TOKEN.
- dependency-review.yml: blocks severity:high on PRs touching manifests/lockfiles.
- release.yml: tag-triggered GitHub Release with auto-generated changelog.

Branch + tag conventions: feature/fix branches run checks only; develop publishes v0.X.Y-dev.<run_number>; rc/release publishes v0.X.Y-rc.N; main publishes v0.X.Y. Conventional-Commits-aware bumping (feat → minor, fix → patch, feat!/BREAKING → major). Seed version v0.1.0.

2026-05-13 06:28:10 -05:00

4 lines

137 B

Plaintext

Raw Permalink Blame History

	`# CODEOWNERS — review hints for the sole maintainer.`
	`# Wildcard catches everything; expand later as the team grows.`
	`* @KofTwentyTwo`