Skip to content

ci: adopt reusable-actions shared workflows - #5

Merged
decaf-ts-admin merged 1 commit into
masterfrom
ci/reusable-actions-callers
Sep 2, 2026
Merged

ci: adopt reusable-actions shared workflows#5
decaf-ts-admin merged 1 commit into
masterfrom
ci/reusable-actions-callers

Conversation

@decaf-ts-admin

Copy link
Copy Markdown
Contributor

What

  • All shared workflows become thin callers of decaf-ts/reusable-actions/.github/workflows/* @master (codeql, jest-coverage, nodejs-build-prod, pages, publish-on-release, release-on-merge-pr, release-on-tag, snyk, trivy, renovate).
  • Security scanning is enforced at release time: snyk + trivy gates run inside release-on-tag and block the release (and the npm publish) on HIGH/CRITICAL findings.
  • Pages deploys exactly once per release (tag push).
  • Adds the prepare-it-tests npm script — every shared test workflow calls npm run prepare-it-tests --if-present before testing.
  • Repo-specific workflows stay local.

Follows the pattern validated end-to-end on decaf-ts/ts-workspace (#66-#68) and decaf-ts/logging (#16).

- all shared workflows become thin callers of
  decaf-ts/reusable-actions/.github/workflows/* @master (codeql,
  jest-coverage, nodejs-build-prod, pages, publish-on-release,
  release-on-merge-pr, release-on-tag, snyk, trivy, renovate)
- security scanning enforced at release time: snyk + trivy gates run
  inside release-on-tag and block the release (and npm publish) on
  HIGH/CRITICAL findings; standalone trivy keeps the weekly dep pass
  and manual dispatch; standalone snyk keeps manual dispatch
- pages deploys exactly once per release (tag push)
- prepare-it-tests script boots integration-test infra; called by
  every shared workflow that runs tests
- repo-specific workflows stay local
@decaf-ts-admin
decaf-ts-admin requested review from a team as code owners September 2, 2026 21:39
@github-actions

github-actions Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

Coverage report

Total coverage

Status Category Percentage Covered / Total
🟡 Statements 43.61% 642/1472
🟡 Branches 27.21% 185/680
🟡 Functions 42.97% 107/249
🟢 Lines 73.41% 1717/2339

Status of coverage: 🟢 - ok, 🟡 - slightly more than threshold, 🔴 - under the threshold

Report generated by 🧪jest coverage report action from bba9476

@decaf-ts-admin
decaf-ts-admin merged commit 8b5dfeb into master Sep 2, 2026
6 checks passed
@decaf-ts-admin
decaf-ts-admin deleted the ci/reusable-actions-callers branch September 2, 2026 21:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant