test(ci): qualify required Docker integration runtime

Co-Authored-By: GPT-6.1 <noreply@openai.com>
test(ci): document exact historical fixture scanner fingerprints
2026-10-31 20:04:20 +00:00 · 2026-10-31 20:01:52 +00:00 · 2026-10-31 12:41:27 +00:00 · 2026-10-21 15:35:15 -05:00 · 2026-10-21 14:52:27 -05:00 · 2026-10-21 14:20:13 -05:00
5 changed files with 35 additions and 3 deletions
@@ -0,0 +1,3 @@
+Central Java verification, tests and secret scan are supplied by the organization-scoped workflow.
+
+Integration suites require the declared isolated rootless Docker pool.
@@ -1,12 +1,12 @@
 version: 2.1
 setup: true
 orbs:
-  qqq-orb: kingsrook/qqq-orb@0.7.12
+  qqq-orb: kingsrook/qqq-orb@0.8
 workflows:
  setup:
    jobs:
    - qqq-orb/generate_pipeline:
-        orb_version: 0.7.12
+        orb_version: '0.8'
        filters:
          branches:
            ignore: automation/qbit-rc-pending
@@ -0,0 +1,23 @@
+name: CodeQL
+'on':
+  push:
+    branches:
+    - main
+    - develop
+    - release/**
+    - hotfix/**
+  pull_request: {}
+  schedule:
+  - cron: 41 16 * * 0
+  workflow_dispatch: {}
+permissions:
+  contents: read
+  actions: read
+  security-events: write
+  packages: read
+concurrency:
+  group: codeql-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+jobs:
+  analyze:
+    uses: QRun-IO/qqq-orb/.github/workflows/qbit-codeql.yml@c288a8864fe9054f68410e1d78f5863aea4c4d22
@@ -0,0 +1,6 @@
+
+# Reviewed historical unit-test redaction canaries and isolated container fixture credentials.
+# Exact commit/file/rule/line fingerprints only; future findings remain blocking.
+63c441e6cd0a1785199b97b424a0a28d77aac3ff:src/test/java/com/kingsrook/qbits/objectstorage/health/ObjectStorageConnectionChecksTest.java:generic-api-key:78
+18ffbf1e75c588a45671a549500f971b36512b11:src/test/java/com/kingsrook/qbits/objectstorage/conformance/Targets.java:generic-api-key:162
+18ffbf1e75c588a45671a549500f971b36512b11:src/test/java/com/kingsrook/qbits/objectstorage/conformance/Targets.java:generic-api-key:180
@@ -1,5 +1,5 @@
 profile: qbit
-orb_version: 0.7.12
+orb_version: '0.8'
 default_branch: develop
 java_version: '21'
 browsers: true
Author	SHA1	Message	Date
forge-recoveryandGPT-6.1	771b7d3c86	test(ci): qualify required Docker integration runtime QRun-IO/ci-policy: ci / fork-guard (pull_request) Skipped Details QRun-IO/ci-policy: ci / java-maven-1 (pull_request) Skipped Details QRun-IO/ci-policy: ci / node-2 (pull_request) Skipped Details QRun-IO/ci-policy: ci / source-config-3 (pull_request) Skipped Details QRun-IO/ci-policy: ci / not-enrolled (pull_request) Skipped Details QRun-IO/ci-policy: Shared Java Maven CI with Docker / secrets (pull_request) Successful in 12s Details QRun-IO/ci-policy: Shared Java Maven CI with Docker / verify (pull_request) Successful in 4m9s Details QRun-IO/ci-policy: Shared Java Maven CI with Docker / gate (pull_request) Successful in 7s Details QRun-IO/ci-policy: ci / java-docker-0 (pull_request) Successful in 21m15s Details QRun-IO/ci-policy: ci / ci-result (pull_request) Successful in 4s Details QBit CodeQL / Analyze branch source (pull_request) Canceled after 0s Details CodeQL / analyze (pull_request) Canceled after 0s Details Co-Authored-By: GPT-6.1 <noreply@openai.com>	2026-10-31 20:04:20 +00:00
forge-recoveryandGPT-6.1	7d927e76f6	test(ci): document exact historical fixture scanner fingerprints QRun-IO/ci-policy: Shared Java Maven CI / gate (pull_request) Canceled after 0s Details QRun-IO/ci-policy: Shared Java Maven CI / secrets (pull_request) Canceled after 0s Details QRun-IO/ci-policy: ci / ci-result (pull_request) Canceled after 0s Details QRun-IO/ci-policy: Shared Java Maven CI / verify (pull_request) Canceled after 12s Details QRun-IO/ci-policy: ci / java-maven-1 (pull_request) Canceled after 12s Details QBit CodeQL / Analyze branch source (pull_request) Canceled after 0s Details CodeQL / analyze (pull_request) Canceled after 0s Details QRun-IO/ci-policy: ci / fork-guard (pull_request) Skipped Details QRun-IO/ci-policy: ci / java-docker-0 (pull_request) Skipped Details QRun-IO/ci-policy: ci / source-config-3 (pull_request) Skipped Details QRun-IO/ci-policy: ci / node-2 (pull_request) Skipped Details QRun-IO/ci-policy: ci / not-enrolled (pull_request) Skipped Details Unit-test redaction canaries and isolated Docker fixture credentials were reviewed at the flagged historical commits. No path or rule exclusion is added. Co-Authored-By: GPT-6.1 <noreply@openai.com>	2026-10-31 20:01:52 +00:00
forge-recoveryandGPT-6.1	361bb8f9dd	test(ci): qualify organization-wide Gitea Java workflow QRun-IO/ci-policy: ci / fork-guard (pull_request) Skipped Details QRun-IO/ci-policy: ci / node-1 (pull_request) Skipped Details QRun-IO/ci-policy: ci / source-config-2 (pull_request) Skipped Details QRun-IO/ci-policy: ci / not-enrolled (pull_request) Skipped Details QBit CodeQL / Analyze branch source (pull_request) Canceled after 0s Details CodeQL / analyze (pull_request) Canceled after 0s Details QRun-IO/ci-policy: Shared Java Maven CI / secrets (pull_request) Failing after 13s Details QRun-IO/ci-policy: Shared Java Maven CI / verify (pull_request) Failing after 1m40s Details QRun-IO/ci-policy: Shared Java Maven CI / gate (pull_request) Failing after 8s Details QRun-IO/ci-policy: ci / java-maven-0 (pull_request) Failing after 14m49s Details QRun-IO/ci-policy: ci / ci-result (pull_request) Failing after 3s Details Co-Authored-By: GPT-6.1 <noreply@openai.com>	2026-10-31 12:41:27 +00:00
james.maesandCodex	a7b5f19626	ci: adopt managed orb 0.8 patch track (#41 ) Co-authored-by: Codex <noreply@openai.com>	2026-10-21 15:35:15 -05:00
james.maesandCodex	79bc8fcf34	ci: adopt shared orb 0.7.18 (#40 ) Co-authored-by: Codex <noreply@openai.com>	2026-10-21 14:52:27 -05:00
james.maesandCodex	4eec8b56f3	ci: adopt shared orb 0.7.17 (#39 ) Co-authored-by: Codex <noreply@openai.com>	2026-10-21 14:20:13 -05:00
james.maesandCodex	988f4c56b1	ci: centralize QBit source scanning (#36 ) Co-authored-by: Codex <noreply@openai.com>	2026-10-21 10:43:43 -05:00