Skip to content

feat: V2 Development Workflow with CI/CD Fixes#32

Merged
nullhack merged 14 commits intomainfrom
V2/init
Apr 11, 2026
Merged

feat: V2 Development Workflow with CI/CD Fixes#32
nullhack merged 14 commits intomainfrom
V2/init

Conversation

@nullhack
Copy link
Copy Markdown
Owner

Summary

Complete V2 architecture implementation with GitHub Actions CI/CD fixes and simplified development workflow.

Key Changes

🔧 GitHub Actions Fixes

  • Repository Policy: Changed from local_only to all to enable external marketplace actions
  • Security Enhancement: SHA-pinned all external actions for immutable references
  • Workflow Updates: Fixed startup failures in ci.yml, codeql.yml, dependency-review.yml

🏗️ V2 Architecture

  • Breaking Change: Transition from V1 template validation to V2 project development
  • Docker Modernization: Security-first containerization approach
  • Agent Integration: Complete OpenCode AI agent setup for development workflow

📚 Documentation & Simplification

  • Streamlined README: Focus on simple 3-step setup (Clone → Setup → OpenCode)
  • Removed Complexity: Simplified from Docker-heavy to development-focused workflow
  • Version Update: v2.0.20260411 - Armored Pangolin release

🧹 File Cleanup

  • Removed unnecessary .secrets.baseline and validate-docker.py files
  • Cleaned up development workflow complexity

Testing

  • All GitHub Actions workflows now use secure SHA-pinned versions
  • Repository can execute external marketplace actions
  • CI/CD pipeline should run successfully on this PR

Migration Notes

This is a major version (v2.0) representing architectural changes from V1 to V2. Projects using V1 template validation workflows should plan migration to V2 project development workflows.

nullhack added 14 commits April 11, 2026 14:28
BREAKING CHANGE: V1 → V2 architecture transition from template validation to project development workflows
- Remove Docker-centric sections and replace with simple development commands
- Update quick start to be 3-step process without Docker complexity
- Emphasize AI agents and development workflow over containerization
- Update version references to v2.0.20260411 - Armored Pangolin
- Focus on task commands and quality assurance features
- Update repository policy from local_only to allow marketplace actions
- Pin all external actions to specific SHA commits for security:
  * actions/checkout@8ade135
  * astral-sh/setup-uv@d19427a
  * codecov/codecov-action@015f24e
  * github/codeql-action@e2b3eaf
- Remove unnecessary files: .secrets.baseline, validate-docker.py
- Fix CI pipeline while maintaining security best practices

Resolves GitHub Actions startup_failure issues in workflows.
Update SHA from d19427ac7c4a6a471caeb4f19c27e9026d98d1d8 to
cdfb2ee6dde255817c739680168ad81e184c4bfb (latest valid commit)
to resolve GitHub Actions failure.
- Generate uv.lock file required by --locked flag in workflows
- Update CI matrix to only test Python 3.13 (project minimum requirement)
- Resolves dependency sync failures in GitHub Actions
- Add missing return type annotation to main() function
- Replace print statement with proper logging in setup_project.py
- Import logging module for proper logging usage
- Add ruff noqa: T201 comment to allow print statements in setup script
- Setup scripts legitimately need print for user interaction output
- Revert logging changes that were inappropriate for this use case
- Remove ruff: noqa comment and fix properly
- Add structured logging with clean output format
- Replace all print() calls with logger.info() for proper code quality
- Configure logging to output to stdout for user feedback
- Fix import sorting with ruff --fix
- Add timezone.utc to datetime.now() calls
- Convert type hints from implicit Optional to T | None syntax
- Fix line length issues with proper string breaking
- Resolve test code style issues (naming, unused vars, line wrapping)
- Enhance pytest.raises with match parameter for better error checking

All tests pass (4/4) and ruff linting checks are clean
All ruff checks pass locally - triggering CI to confirm remote validation
- Add ValidVerbosity import and type casting in tests
- Configure pyright to exclude mutants/ and .mutmut-cache/ directories
- Add proper type annotations with cast() for hypothesis tests
- Fix intentionally invalid test case with type: ignore comment
- All tests pass (5/5) and type checking is clean
- Restore .secrets.baseline file that was incorrectly removed
- Generated with detect-secrets scan to establish baseline for known patterns
- Fixes CI failure in 'Check for secrets' step
- Contains baseline for one false positive in skill documentation
- Fix invalid SHA for astral-sh/setup-uv action (d19427ac -> cdfb2ee6dd)
- Remove allow-licenses and deny-licenses conflict by using only allow-licenses
- This should resolve both Python Dependency Security and Dependency Review failures
…b default setup

The custom CodeQL workflow was failing because GitHub's default CodeQL setup
is already enabled for this repository. Removing the custom workflow file
resolves the conflict while maintaining security scanning through GitHub's
built-in CodeQL functionality.

Error was: 'CodeQL analyses from advanced configurations cannot be processed
when the default setup is enabled'
@nullhack nullhack merged commit 8ed4ef1 into main Apr 11, 2026
8 checks passed
@nullhack nullhack deleted the V2/init branch April 11, 2026 19:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant