ci: build on the shared ci-workflows container workflow #47

Merged

james.maes merged 5 commits from ci/ci-workflows into develop 2026-11-07 20:21:13 +00:00

Conversation 0 Commits 5 Files Changed 8

+41 -80

james.maes commented 2026-11-07 20:02:28 +00:00

Owner

Copy link

Copy source

Moves qqq-all onto KofTwentyTwo/ci-workflows container.yaml@v1.

• prebuild: script unit tests (python3 -m unittest discover -s scripts), mvn verify, packaged core HTTP smoke (scripts/run_core_smoke.py), as the old orb build-and-test + core jobs did
• image: qqq-all|Dockerfile|.; publish-branch develop pushes git.kof22.com/qrun-io/qqq-all:ci-<sha>-run-<n> plus develop
• no gitops deploy (no cluster-gitops tenant references qqq-all)
• removed: .circleci/config.yml, .qqq-ci.yml (retired qqq-orb), .github/workflows/release.yml (called retired GitHub qqq-orb release)

Not ported: the full Compose smoke (run_full_smoke.py) needs docker compose with the full service stack; it stays a local check for now.

🤖 Generated with Claude Code

Moves qqq-all onto `KofTwentyTwo/ci-workflows` `container.yaml@v1`. - prebuild: script unit tests (`python3 -m unittest discover -s scripts`), `mvn verify`, packaged core HTTP smoke (`scripts/run_core_smoke.py`), as the old orb build-and-test + core jobs did - image: `qqq-all|Dockerfile|.`; publish-branch `develop` pushes `git.kof22.com/qrun-io/qqq-all:ci-<sha>-run-<n>` plus `develop` - no gitops deploy (no cluster-gitops tenant references qqq-all) - removed: `.circleci/config.yml`, `.qqq-ci.yml` (retired qqq-orb), `.github/workflows/release.yml` (called retired GitHub qqq-orb release) Not ported: the full Compose smoke (`run_full_smoke.py`) needs docker compose with the full service stack; it stays a local check for now. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

james.maes added 1 commit 2026-11-07 20:02:28 +00:00

ci: build on the shared ci-workflows container workflow ... 2b04d936cf

Replace the retired CircleCI qqq-orb pipeline and the GitHub release
workflow (qqq-orb caller) with KofTwentyTwo/ci-workflows container.yaml@v1.
Every push runs the script unit tests, mvn verify and the packaged core
HTTP smoke check, then builds and Trivy-scans the image; develop pushes
git.kof22.com/qrun-io/qqq-all (ci-<sha>-run-<n> and develop).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

james.maes added 1 commit 2026-11-07 20:03:11 +00:00

ci: install checksum-pinned Python for the smoke scripts ... 0e80a5e736

The job image runs unprivileged without python3, so apt is unavailable.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

james.maes added 1 commit 2026-11-07 20:03:43 +00:00

ci: one command per line for the Python install ... 22bb23613f

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

james.maes added 1 commit 2026-11-07 20:05:05 +00:00

ci: keep the script tests green on Gitea CI ... 30820a6d4f

The CI-contract test now checks the Gitea workflow smokes the Maven
final jar (the orb .qqq-ci.yml is gone). The release-bundle test renders
compose.yaml with docker compose config, so CI installs a checksum-pinned
Compose binary behind a docker compose-only shim.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

james.maes added 1 commit 2026-11-07 20:13:36 +00:00

build(image): apply Ubuntu security updates in the runtime image ... 0740fab027

The eclipse-temurin:21-jre-jammy base ships apt 2.4.14 (HIGH
CVE-2026-109518, fixed in 2.4.15ubuntu0.1), which the CI Trivy gate
blocks. Upgrade installed packages when building the image.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

james.maes merged commit 46afa2e533 into develop 2026-11-07 20:21:13 +00:00

james.maes deleted branch ci/ci-workflows 2026-11-07 20:21:13 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

bug

Something isn't working

dependencies

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

epic

Epic tracking issue

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

question

Further information is requested

secuurity

wontfix

This will not be worked on

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

forge-recovery (Forge Recovery) james.maes (James Maes)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/qqq-all#47