Skip to content

ci: adopt reusable-actions shared workflows - #108

Closed
decaf-ts-admin wants to merge 1 commit into
masterfrom
ci/reusable-actions-callers
Closed

decaf-ts-admin wants to merge 1 commit into
masterfrom
ci/reusable-actions-callers

Conversation

@decaf-ts-admin

Copy link
Copy Markdown
Contributor

What

  • All shared workflows become thin callers of decaf-ts/reusable-actions/.github/workflows/* @master (codeql, jest-coverage, nodejs-build-prod, pages, publish-on-release, release-on-merge-pr, release-on-tag, snyk, trivy, renovate).
  • Security scanning is enforced at release time: snyk + trivy gates run inside release-on-tag and block the release (and the npm publish) on HIGH/CRITICAL findings.
  • Pages deploys exactly once per release (tag push).
  • Adds the prepare-it-tests npm script — every shared test workflow calls npm run prepare-it-tests --if-present before testing.
  • Repo-specific workflows stay local.

Follows the pattern validated end-to-end on decaf-ts/ts-workspace (#66-#68) and decaf-ts/logging (#16).

- all shared workflows become thin callers of
  decaf-ts/reusable-actions/.github/workflows/* @master (codeql,
  jest-coverage, nodejs-build-prod, pages, publish-on-release,
  release-on-merge-pr, release-on-tag, snyk, trivy, renovate)
- security scanning enforced at release time: snyk + trivy gates run
  inside release-on-tag and block the release (and npm publish) on
  HIGH/CRITICAL findings; standalone trivy keeps the weekly dep pass
  and manual dispatch; standalone snyk keeps manual dispatch
- pages deploys exactly once per release (tag push)
- prepare-it-tests script boots integration-test infra; called by
  every shared workflow that runs tests
- repo-specific workflows stay local
@decaf-ts-admin
decaf-ts-admin requested review from a team as code owners September 2, 2026 21:39
@github-actions

github-actions Bot commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

Coverage report

Total coverage

Status Category Percentage Covered / Total
🟢 Statements 29.53% 2479/8395
🟡 Branches 19.67% 978/4973
🟢 Functions 26.4% 390/1477
🟢 Lines 30.74% 2780/9044

Status of coverage: 🟢 - ok, 🟡 - slightly more than threshold, 🔴 - under the threshold

Report generated by 🧪jest coverage report action from f2cb0e7

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant