mirror of
https://github.com/Sea-Haven-Industries/.github.git
synced 2026-09-30 05:53:12 +00:00
9c1ecf9428
* docs: align organization templates with Cursor conventions Refs: PLAT-62 * ci: add deterministic PR policy gate Refs: PLAT-62 * fix(ci): grandfather unchanged workflow policy debt Refs: PLAT-62 * fix(ci): address PR policy security review Refs: PLAT-62 * fix(ci): scan copied workflow files Refs: PLAT-62 * fix(ci): close remaining workflow policy bypasses Refs: PLAT-62 * fix(policy): reject uses block scalar action refs Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com> * fix(policy): preserve line-specific violation fingerprints Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com>
18 lines
822 B
YAML
18 lines
822 B
YAML
name: CI (Static Site)
|
|
on:
|
|
pull_request:
|
|
branches: [main]
|
|
|
|
jobs:
|
|
ci:
|
|
# Job id MUST stay `ci`: the reusable's job is also `ci`, so the check
|
|
# context resolves to the required `ci / ci`.
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/ci-static.yaml@81cf168170f356d1423d7736f7ce93fd6611ad53 # v1.0.4
|
|
with:
|
|
# Pinned explicitly (handbook): local dev is Node 24 / npm 11, which
|
|
# generates lockfileVersion 3. Being explicit avoids lockfile drift.
|
|
node-version: "24"
|
|
# Defaults to source mode — the checks run against the repo root. For a
|
|
# templated site (Eleventy, Astro), add `build-command` plus `check-dir`
|
|
# so the checks validate the BUILT output that actually ships; otherwise
|
|
# they pass vacuously against source templates that contain no HTML.
|