Adam Moussa
30c8e22e4f
Add reusable CD workflows and OIDC deploy roles template
...
Two reusable deploy workflows (cd-sam.yaml, cd-cdk.yaml) for
GitHub Actions OIDC-based deployments. CloudFormation template
provisions per-repo deploy roles for all 10 deployable repos.
2026-05-08 16:45:35 -04:00
Adam Moussa
f92ac07ce6
Add optional CDK synth support to Python CI workflow ( #10 )
...
Enables Python CDK repos (po-ingest, workorder-ingest) to use the
same reusable workflow. Adds run-cdk-synth, cdk-dir, and node-version
inputs. Refactors dependency install to be shared between pytest and
cdk synth paths.
2026-05-08 15:38:30 -04:00
Adam Moussa
d042bd7bdc
Add reusable CI workflows for Python/SAM and TypeScript/CDK repos ( #9 )
...
Parameterized workflows that each repo calls via a thin 3-5 line
caller. All lint, test, and validate steps are toggleable so repos
can adopt incrementally. Covers Python SAM, Python CDK, TypeScript
CDK, and Node.js SAM stacks.
2026-05-08 14:25:21 -04:00
Adam Moussa
086c6e1341
Update Claude review: tighter prompt, tool restrictions, manual dispatch ( #8 )
...
* Update Claude review: tighter prompt, tool restrictions, manual dispatch
* Add draft PR guard to skip reviews on draft PRs
2026-05-08 11:09:47 -04:00
Adam Moussa
e8305b3666
Allow all bots to trigger Claude code review ( #7 )
...
Bot-initiated PRs (Cursor, Dependabot, etc.) were being rejected by
claude-code-action. Set allowed_bots to '*' so all bot PRs get reviewed.
2026-05-07 20:17:12 -04:00
Adam Moussa
4d816d6a9a
Add Dependabot auto-merge workflow ( #6 )
2026-05-07 18:45:22 -04:00
Adam Moussa
e431c74f71
Merge pull request #5 from Sea-Haven-Industries/feature/add-pr-trigger
...
Add pull_request trigger for required workflow ruleset
2026-05-06 20:08:05 -04:00
Adam Moussa
b305a4a887
Add pull_request trigger for required workflow ruleset
...
Required workflows via rulesets need a pull_request trigger directly.
Falls back to org secret when not called via workflow_call.
2026-05-06 20:01:41 -04:00
Adam Moussa
0da9b01905
Merge pull request #4 from Sea-Haven-Industries/feature/add-id-token-permission
...
Add id-token permission for claude-code-action
2026-05-06 19:45:00 -04:00
Adam Moussa
0889d0f4e4
Add id-token: write permission for claude-code-action
...
The action requires OIDC token access even when using an API key directly.
Also updates the rollout script template for future repos.
2026-05-06 19:44:35 -04:00
Adam Moussa
2323416ba8
Merge pull request #3 from Sea-Haven-Industries/feature/fix-workflow-inputs
...
Fix claude-code-action input names
2026-05-06 19:42:04 -04:00
Adam Moussa
6ab1889bb8
Fix claude-code-action input names
...
direct_prompt and review_comments are not valid inputs for
claude-code-action@v1. Use prompt instead.
2026-05-06 19:40:31 -04:00
Adam Moussa
4a1d53aca2
Merge pull request #2 from Sea-Haven-Industries/feature/fix-rollout-script
...
Fix false-positive existence check in rollout script
2026-05-06 18:09:55 -04:00
Adam Moussa
b7502a3bf8
Fix false-positive existence check in rollout script
...
gh api returns error JSON on 404, which made the variable non-empty.
Check exit code instead of output content.
2026-05-06 18:07:29 -04:00
Adam Moussa
5d3aed93c3
Merge pull request #1 from Sea-Haven-Industries/feature/exclude-shoc-repos
...
Exclude shoc-frontend-new and shoc-backend from workflows
2026-05-06 18:00:48 -04:00
Adam Moussa
0f166a5a6f
Exclude shoc-frontend-new and shoc-backend from review and audit workflows
2026-05-06 17:34:29 -04:00
Adam Moussa
e24004415e
Add Claude Code review and compliance audit workflows
...
- Reusable PR review workflow (repos call via thin wrapper)
- Weekly compliance audit across all org repos
- Rollout script to push wrapper workflow to all repos
- Uses GitHub App tokens for cross-repo auth (no PAT rotation needed)
2026-05-06 15:10:48 -04:00
