From 61502eb6656ea3266f7bf3d80f359d3d140a9aa4 Mon Sep 17 00:00:00 2001 From: James Maes Date: Sun, 8 Nov 2026 07:34:00 -0600 Subject: [PATCH 1/3] ci: build on the shared ci-workflows macOS workflow Runs the repository's build (and tests where it has them) on the KOF macOS host runner through ci-workflows macos.yaml. Co-Authored-By: Claude Opus 5.5 --- .gitea/NATIVE-CI.md | 17 ----------------- .gitea/workflows/build.yaml | 13 +++++++++++++ 2 files changed, 13 insertions(+), 17 deletions(-) delete mode 100644 .gitea/NATIVE-CI.md create mode 100644 .gitea/workflows/build.yaml diff --git a/.gitea/NATIVE-CI.md b/.gitea/NATIVE-CI.md deleted file mode 100644 index 6b7f1e9..0000000 --- a/.gitea/NATIVE-CI.md +++ /dev/null @@ -1,17 +0,0 @@ -# Native CI verification - -MetalPOC is a native Apple project (`MetalPOC.xcodeproj`, generated with XcodeGen). Its native verification is **centralized**: -this repository carries no workflow that selects a host or a runner label. - -- The owner-level `native.yaml` in the KofTwentyTwo CI policy repository dispatches the shared `swift` profile for - `KofTwentyTwo/MetalPOC` with inputs declared centrally (`xcode-build` of the `MetalPOC` scheme, project generated by XcodeGen). -- It runs on pushes to the protected branches, on manual dispatch, and on pull requests opened from a branch of this same - repository. A pull request from a fork never runs on a host: a Linux `fork-deny` job fails it instead. -- This is a **build-only** verification plus a secrets scan. The project declares no unit-test suite, so no test result is - produced or claimed. Hardware, UI and signing checks are out of scope and are not waived by this document. -- The `native-result` check aggregates the native jobs. It fails unless the native build and the secrets scan succeeded, - so a skipped, failed or cancelled native run cannot pass. -- The primary `ci-result` check (source/config lint and secrets scan) continues to run on every pull request. - -Both `ci-result` and `native-result` are required checks for `main`. Changing what runs, where, or with which inputs is -done in the CI policy repository, never in a pull request to this repository. diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml new file mode 100644 index 0000000..78b4ba8 --- /dev/null +++ b/.gitea/workflows/build.yaml @@ -0,0 +1,13 @@ +name: build +on: + push: + branches: ['**'] + tags: ['v*'] +jobs: + macos: + uses: self:KofTwentyTwo/ci-workflows/.gitea/workflows/macos.yaml@native-workflows + secrets: inherit + with: + commands: | + xcodegen generate + xcodebuild -quiet -project MetalPOC.xcodeproj -scheme MetalPOC -configuration Debug -destination 'platform=macOS' CODE_SIGNING_ALLOWED=NO build -- 2.54.0 From 8aee491ee783234db4dc8887e3a9ec431ed021a4 Mon Sep 17 00:00:00 2001 From: James Maes Date: Sun, 8 Nov 2026 07:45:05 -0600 Subject: [PATCH 2/3] ci: call the shared workflow from ci-workflows main Co-Authored-By: Claude Opus 5.5 --- .gitea/workflows/build.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml index 78b4ba8..f03d2a8 100644 --- a/.gitea/workflows/build.yaml +++ b/.gitea/workflows/build.yaml @@ -5,7 +5,7 @@ on: tags: ['v*'] jobs: macos: - uses: self:KofTwentyTwo/ci-workflows/.gitea/workflows/macos.yaml@native-workflows + uses: self:KofTwentyTwo/ci-workflows/.gitea/workflows/macos.yaml@main secrets: inherit with: commands: | -- 2.54.0 From 1bf7b275207931bf05bc810e41b23e1f9771208a Mon Sep 17 00:00:00 2001 From: James Maes Date: Sun, 8 Nov 2026 07:47:32 -0600 Subject: [PATCH 3/3] ci: pin the shared workflow to v1 Co-Authored-By: Claude Opus 5.5 --- .gitea/workflows/build.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml index f03d2a8..32390e4 100644 --- a/.gitea/workflows/build.yaml +++ b/.gitea/workflows/build.yaml @@ -5,7 +5,7 @@ on: tags: ['v*'] jobs: macos: - uses: self:KofTwentyTwo/ci-workflows/.gitea/workflows/macos.yaml@main + uses: self:KofTwentyTwo/ci-workflows/.gitea/workflows/macos.yaml@v1 secrets: inherit with: commands: | -- 2.54.0