Comprehensive infrastructure improvements: Dashboard fixes, linting standards, and workflow reliability

.checkov.yml

@@ -0,0 +1,51 @@
+# Checkov configuration for OracleInstanceCreator
+# Security and compliance scanning for Infrastructure as Code
+
+# Framework settings
+framework:
+  - github_actions
+  - secrets
+  - dockerfile
+  - json
+  - yaml
+
+# Skip checks that are not relevant for this project
+skip-check:
+  # Skip Docker-related checks if not using containers
+  - CKV_DOCKER_1
+  - CKV_DOCKER_2
+  - CKV_DOCKER_3
+
+  # Skip Kubernetes checks (not applicable)
+  - CKV_K8S_*
+
+  # Skip AWS-specific checks (using OCI)
+  - CKV_AWS_*
+
+  # Allow specific GitHub Actions patterns
+  - CKV_GHA_1  # Pinned GitHub Actions versions (can be relaxed)
+
+# Include specific security checks
+check:
+  - CKV_SECRET_*  # Secret detection
+  - CKV_GHA_*     # GitHub Actions security
+  - CKV2_GHA_*    # Advanced GitHub Actions checks
+
+# Output settings
+output: cli
+quiet: false
+compact: false
+
+# File patterns to scan
+files:
+  - "**/*.yml"
+  - "**/*.yaml"
+  - "**/*.json"
+  - ".github/workflows/**"
+
+# Directories to skip
+skip-path:
+  - node_modules
+  - .git
+  - tests/fixtures
+  - docs/examples

.claude/settings.json

@@ -0,0 +1,63 @@
+{
+  "$schema": "https://json.schemastore.org/claude-code-settings.json",
+  "env": {
+    "BASH_DEFAULT_TIMEOUT_MS": "60000",
+    "BASH_MAX_TIMEOUT_MS": "60000",
+    "MAX_MCP_OUTPUT_TOKENS": "150000"
+  },
+  "includeCoAuthoredBy": true,
+  "permissions": {
+    "allow": [
+      "Bash",
+      "Bash(gh:*)",
+      "Bash(git:*)",
+      "Bash(chmod:*)",
+      "Bash(sed:*)",
+      "Bash(make:*)",
+      "Bash(shellcheck:*)",
+      "Bash(actionlint:*)",
+      "Bash(shfmt:*)",
+      "Bash(npx:*)",
+      "Bash(eslint:*)",
+      "Bash(djlint:*)",
+      "Bash(grep:*)",
+      "Bash(yamllint:*)",
+      "WebSearch",
+      "Read(/tmp/**)",
+      "Read(**/IdeaProjects/**)",
+      "mcp__zp__Zen__thinkdeep",
+      "mcp__zp__Zen__planner",
+      "mcp__zp__Zen__analyze",
+      "mcp__gh__GitHub__create_pull_request",
+      "mcp__gh__GitHub__get_commit",
+      "mcp__gh__GitHub__get_job_logs",
+      "mcp__gh__GitHub__get_pull_request_files",
+      "mcp__gh__GitHub__get_pull_request_reviews",
+      "mcp__gh__GitHub__get_pull_request",
+      "mcp__gh__GitHub__get_pull_request_status",
+      "mcp__gh__GitHub__get_workflow_run_logs",
+      "mcp__gh__GitHub__get_pull_request_diff",
+      "mcp__gh__GitHub__get_pull_request_comments",
+      "mcp__gh__GitHub__list_branches",
+      "mcp__gh__GitHub__list_commits",
+      "mcp__gh__GitHub__get_workflow_run",
+      "mcp__gh__GitHub__list_pull_requests",
+      "mcp__gh__GitHub__list_workflow_jobs",
+      "mcp__gh__GitHub__list_workflow_runs",
+      "mcp__gh__GitHub__list_workflows",
+      "mcp__gh__GitHub__merge_pull_request",
+      "mcp__gh__GitHub__search_pull_requests",
+      "mcp__gh__GitHub__search_repositories",
+      "mcp__gh__GitHub__rerun_failed_jobs",
+      "mcp__gh__GitHub__rerun_workflow_run",
+      "mcp__gh__GitHub__run_workflow",
+      "mcp__gh__GitHub__search_code",
+      "mcp__gh__GitHub__update_pull_request",
+      "mcp__gh__GitHub__update_pull_request_branch"
+    ],
+    "ask": ["Bash(python:*)", "Bash(python3:*)", "Bash(rm:*)"],
+    "deny": ["Bash(pip install:*)", "Bash(pip3 install:*)", "Bash(brew install:*)", "Read(**/.ssh/*)"]
+  },
+  "model": "claude-sonnet-4-20250514",
+  "defaultMode": "plan"
+}

.codespellrc

@@ -0,0 +1,104 @@
+[codespell]
+# Codespell configuration for OCI Automation Project
+# Checks spelling in code and documentation
+
+# Paths to check  
+check-filenames = 
+check-hidden =
+
+# File types to include
+builtin = clear,rare,informal,usage,code,names
+
+# Skip files and directories
+skip = .git,node_modules,*.min.js,*.min.css,.jscpd-report,dist,build,out,logs,tmp,temp,.tmp
+
+# Ignore words (project-specific terms)
+ignore-words-list = 
+    oci,ocid,ocids,
+    vm,vms,vcpu,vcpus,
+    gb,gbs,
+    api,apis,cli,
+    json,yaml,yml,
+    http,https,url,urls,
+    auth,oauth,
+    config,configs,
+    repo,repos,
+    lint,linting,linters,
+    timestamp,timestamps,
+    readonly,
+    metadata,
+    workflow,workflows,
+    regex,regexes,
+    param,params,
+    arg,args,
+    env,envs,
+    bool,
+    str,
+    int,
+    const,
+    var,
+    func,
+    util,utils,
+    init,
+    cmd,cmds,
+    exec,
+    async,
+    os,
+    fs,
+    js,
+    css,
+    html,
+    md,
+    sh,
+    bashrc,
+    usr,
+    sbin,
+    proc,
+    sudo,
+    chmod,
+    chown,
+    grep,
+    sed,
+    awk,
+    tput,
+    printf,
+    stdout,
+    stderr,
+    stdin,
+    dev,
+    null,
+    tmp,
+    etc,
+    var,
+    opt,
+    usr,
+    singapore,
+    amd,
+    arm,
+    flex,
+    master,
+    iam,
+    ist,
+    rouge,
+    warmup,
+
+# Regular expressions for additional ignores
+ignore-regex = 
+    # Ignore code-like patterns
+    \b[A-Z_]{3,}\b|
+    # Ignore file paths and URLs
+    [/\\][\w/\\.-]+|
+    # Ignore hexadecimal patterns
+    \b[0-9a-fA-F]{8,}\b|
+    # Ignore base64-like patterns
+    \b[A-Za-z0-9+/]{20,}={0,2}\b|
+    # Ignore version numbers
+    \b\d+\.\d+(\.\d+)?(-\w+)?\b|
+    # Ignore UUIDs and OCIDs
+    \bocid1\.[a-z0-9.-]+\b|
+    # Ignore environment variable patterns
+    \$\{[^}]+\}|\$[A-Z_][A-Z0-9_]*\b
+
+# Output format
+count = 
+quiet-level = 2

.djlintrc

@@ -0,0 +1,9 @@
+{
+  "profile": "html",
+  "extension": "html",
+  "indent": 4,
+  "max_line_length": 120,
+  "ignore": "H006,H013,H014,H016,H020,H021,H023,H025,H030,H031,H035",
+  "exclude": "node_modules/**,build/**,dist/**",
+  "format": false
+}

.editorconfig

@@ -0,0 +1,69 @@
+# EditorConfig configuration for OCI Automation Project
+# Helps maintain consistent coding styles
+
+root = true
+
+# All files
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+# Shell scripts
+[*.sh]
+indent_style = tab
+indent_size = 4
+max_line_length = 120
+
+# JavaScript files  
+[*.js]
+indent_style = space
+indent_size = 2
+max_line_length = 120
+
+# JSON files
+[*.json]
+indent_style = space
+indent_size = 2
+
+# YAML files
+[*.{yml,yaml}]
+indent_style = space
+indent_size = 2
+max_line_length = 120
+
+# HTML files
+[*.html]
+indent_style = space
+indent_size = 4
+max_line_length = 120
+
+# CSS files
+[*.css]
+indent_style = space
+indent_size = 2
+max_line_length = 120
+
+# Markdown files
+[*.md]
+indent_style = space
+indent_size = 2
+max_line_length = 80
+trim_trailing_whitespace = false
+
+# Configuration files
+[*.{toml,ini,conf}]
+indent_style = space
+indent_size = 2
+
+# Makefiles
+[Makefile]
+indent_style = tab
+indent_size = 4
+
+# GitHub workflows
+[.github/workflows/*.{yml,yaml}]
+indent_style = space
+indent_size = 2
+max_line_length = 120

.github/workflows/claude-modes.yml

@@ -1,3 +1,4 @@
+---
 name: Claude Automatic Mode Detection
 
 on:
@@ -20,12 +21,19 @@ on:
 jobs:
   interactive-mode:
     # if: |
-    #   (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude') && !contains(github.event.comment.body, '@claude reviewer')) ||
-    #   (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
-    #   (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
-    #   (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
+    #   (github.event_name == 'issue_comment' &&
+    #    contains(github.event.comment.body, '@claude') &&
+    #    !contains(github.event.comment.body, '@claude reviewer')) ||
+    #   (github.event_name == 'pull_request_review_comment' &&
+    #    contains(github.event.comment.body, '@claude')) ||
+    #   (github.event_name == 'pull_request_review' &&
+    #    contains(github.event.review.body, '@claude')) ||
+    #   (github.event_name == 'issues' &&
+    #    (contains(github.event.issue.body, '@claude') ||
+    #     contains(github.event.issue.title, '@claude')))
     if: |
-      ${{ github.event_name != 'schedule' && github.event_name != 'workflow_dispatch' }} &&
+      ${{ github.event_name != 'schedule' && 
+          github.event_name != 'workflow_dispatch' }} &&
       !contains(github.event.comment.body, '@claude reviewer')
     runs-on: ubuntu-latest
     permissions:
@@ -46,7 +54,7 @@ jobs:
           # - Only acts when trigger phrase is found
           # - Creates tracking comments with progress checkboxes
           # - Perfect for: Interactive Q&A, on-demand code changes
-            
+
   # Automation Mode - Activated automatically when prompt is provided
   automation-mode-scheduled-task:
     if: |