adam/apm-wo-analysis
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/apm-wo-analysis.git synced 2026-09-30 06:33:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
74 commits 2 branches 0 tags 992 KiB
Commit graph

74 commits

This branch
This branch
All branches
Author SHA1 Message Date
Adam Moussa
1362e4aa38
Merge pull request #38 from Sea-Haven-Industries/ci/pin-reusables-v1.0.2
Some checks are pending
Deploy / deploy (push) Waiting to run
Details 
ci(deps): pin org reusable workflows to v1.0.2
 2026-07-28 18:14:26 -04:00
Adam Moussa
72ba94c892 style(ci): normalize workflow block spacing 2026-07-28 18:07:41 -04:00
Adam Moussa
300fdab3bb ci(deps): pin org reusable workflows to v1.0.2 2026-07-28 17:57:51 -04:00
dependabot[bot]
a8266a7e6e
Bump aws-cdk-lib in /cdk in the minor-and-patch group across 1 directory (#34)
Some checks failed
Deploy / deploy (push) Has been cancelled
Details 
Bumps the minor-and-patch group with 1 update in the /cdk directory: [aws-cdk-lib](https://github.com/aws/aws-cdk).


Updates `aws-cdk-lib` from 2.261.0 to 2.262.1
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/compare/v2.261.0...v2.262.1)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.262.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-24 13:03:20 -04:00
dependabot[bot]
3e1e0154db
Update constructs requirement from >=10.7.0 to >=10.7.1 in /cdk (#35) 
Updates the requirements on [constructs](https://github.com/aws/constructs) to permit the latest version.
- [Release notes](https://github.com/aws/constructs/releases)
- [Commits](https://github.com/aws/constructs/compare/v10.7.0...v10.7.1)

---
updated-dependencies:
- dependency-name: constructs
  dependency-version: 10.7.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-24 16:51:08 +00:00
Adam Moussa
eaf214a733
ci: bump reusable workflow pin to f71002a (ruff 0.15.22 pin) (#37) 
Picks up Sea-Haven-Industries/.github#88, which pins ruff in ci-python-sam so unpinned installs no longer float to new releases with changed default rule sets. Ruff 0.16.0's default-rule expansion broke this repo's CI with 21 pre-existing findings (89 in meal-order-manager, the first repo hit). Refs Sea-Haven-Industries/.github#87.
 2026-07-24 16:32:37 +00:00
Adam Moussa
299ead89b3
chore: resolve open code scanning alerts (URL host matching + workflow permissions) (#36)
Some checks are pending
Deploy / deploy (push) Waiting to run
Details 
* fix: Refactor `comment_intent` to use `_contains_url_with_host` for URL host matching.

* ci: add least-privilege permissions blocks to workflow callers
Resolves code scanning alerts #4 and #5 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match.
 2026-07-23 19:10:45 +00:00
Adam Moussa
3748a29744
chore: update CLAUDE.md to reflect current rules and status (#33) 2026-07-23 14:38:08 -04:00
dependabot[bot]
da730d459a
Update constructs requirement from >=10.6.0 to >=10.7.0 in /cdk (#32)
Some checks failed
Deploy / deploy (push) Has been cancelled
Details 
Updates the requirements on [constructs](https://github.com/aws/constructs) to permit the latest version.
- [Release notes](https://github.com/aws/constructs/releases)
- [Commits](https://github.com/aws/constructs/compare/v10.6.0...v10.7.0)

---
updated-dependencies:
- dependency-name: constructs
  dependency-version: 10.7.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-16 17:34:31 -04:00
Adam Moussa
a36e150148
docs: repoint cross-family review to security-review cross_review.py (orchestrator archived) (#31)
Some checks failed
Deploy / deploy (push) Has been cancelled
Details
2026-07-14 19:24:08 -04:00
Adam Moussa
27dd15c541
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) (#30)
Some checks failed
Deploy / deploy (push) Has been cancelled
Details
2026-07-06 18:27:14 -04:00
dependabot[bot]
1c2d77141b
Bump aws-cdk-lib in /cdk in the minor-and-patch group across 1 directory (#29)
Some checks failed
Deploy / deploy (push) Has been cancelled
Details 
Bumps the minor-and-patch group with 1 update in the /cdk directory: [aws-cdk-lib](https://github.com/aws/aws-cdk).


Updates `aws-cdk-lib` from 2.260.0 to 2.261.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/compare/v2.260.0...v2.261.0)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.261.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-02 15:28:04 -04:00
dependabot[bot]
bcd7d30390
Update slack-sdk requirement in /lambdas/slack_post (#28)
Some checks are pending
Deploy / deploy (push) Waiting to run
Details 
Updates the requirements on [slack-sdk](https://github.com/slackapi/python-slack-sdk) to permit the latest version.
- [Release notes](https://github.com/slackapi/python-slack-sdk/releases)
- [Commits](https://github.com/slackapi/python-slack-sdk/compare/v3.33.0...v3.43.0)

---
updated-dependencies:
- dependency-name: slack-sdk
  dependency-version: 3.43.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-02 15:23:37 -04:00
dependabot[bot]
15a9167882
Bump aws-cdk-lib in /cdk in the minor-and-patch group (#27)
Some checks failed
Deploy / deploy (push) Has been cancelled
Details 
Bumps the minor-and-patch group in /cdk with 1 update: [aws-cdk-lib](https://github.com/aws/aws-cdk).


Updates `aws-cdk-lib` from 2.258.1 to 2.260.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/compare/v2.258.1...v2.260.0)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.260.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-22 13:13:34 -04:00
Adam Moussa
44ad13d8cd
Add DLQ messages-present alarm for classifier (INFRA-57) (#26)
Some checks failed
Deploy / deploy (push) Has been cancelled
Details 
The classifier DLQ (apm-wo-analysis-classifier-dlq) had no alarm, so a
message landing there after Lambda exhausts async retries — a genuinely
dropped classifier run — surfaced nowhere.

Add a CloudWatch alarm on AWS/SQS ApproximateNumberOfMessagesVisible
(Maximum, threshold >0, 300s period, 1 evaluation period, notBreaching)
that pages the shared site-alerts SNS topic. Mirrors the
workorder-email-processor-dlq-messages alarm in procurement-ingest's
wo_stack and the payments-payroll-batch-dlq-messages alarm convention.
ALARM-only, no OK action, per the CloudWatch-alarm preference.
 2026-06-17 15:02:10 -04:00
dependabot[bot]
3456c7a37b
Bump aws-cdk-lib in /cdk in the minor-and-patch group (#25)
Some checks are pending
Deploy / deploy (push) Waiting to run
Details 
Bumps the minor-and-patch group in /cdk with 1 update: [aws-cdk-lib](https://github.com/aws/aws-cdk).


Updates `aws-cdk-lib` from 2.258.0 to 2.258.1
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/compare/v2.258.0...v2.258.1)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.258.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-16 17:26:38 -04:00
Adam Moussa
07cd5ae72a
Repo hygiene: PR labeler + README badges (INFRA-56/57) (#24)
Some checks failed
Deploy / deploy (push) Has been cancelled
Details
2026-06-11 14:14:09 -04:00
Adam Moussa
b92c25faf2
docs: CLAUDE.md cdk pin follows handbook Pinning Principle, not a hardcoded version (#22)
Some checks failed
Deploy / deploy (push) Has been cancelled
Details
2026-06-05 18:44:12 -04:00
dependabot[bot]
ec363e6adf
Bump aws-cdk-lib in /cdk in the minor-and-patch group (#21)
Some checks are pending
Deploy / deploy (push) Waiting to run
Details 
Bumps the minor-and-patch group in /cdk with 1 update: [aws-cdk-lib](https://github.com/aws/aws-cdk).


Updates `aws-cdk-lib` from 2.257.0 to 2.258.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/compare/v2.257.0...v2.258.0)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.258.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-05 14:53:10 -04:00
Adam Moussa
6c392a7362
fix(deps): bump aws-cdk-lib pin to 2.257.0 (#20)
Some checks are pending
Deploy / deploy (push) Waiting to run
Details 
Org pin moved from 2.253.1 (bundles vulnerable fast-uri 3.1.0, 2 high
GHSAs) to 2.257.0 (bundles patched 3.1.2). Removes the blanket
dependabot ignore per the new handbook pinning policy (exact pins kept
current by Dependabot; blanket ignores banned).
 2026-06-05 13:18:47 -04:00
Adam Moussa
47b6a9404f
chore(deps): ignore aws-cdk-lib in Dependabot (org pins ==2.253.1) (#19) 2026-06-05 12:40:47 -04:00
Adam Moussa
e8f375b03b
Add dependency-review caller workflow (#18) 
* Add dependency-review caller workflow

Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.

* chore: retrigger checks

* chore: retrigger dep review (post-fix)
 2026-06-05 12:26:32 -04:00
Adam Moussa
ac610d1626 Re-enable CD deploy (remove leftover stack-merge gate)
Some checks failed
Deploy / deploy (push) Has been cancelled
Details
2026-05-29 15:25:24 -04:00
Adam Moussa
6535b92e85
Merge pull request #16 from Sea-Haven-Industries/test/suite-hardening 
Harden the test suite and wire it into CI
 2026-05-29 15:20:54 -04:00
Adam Moussa
094c212323 Set default AWS region in conftest so boto3 clients construct in CI 2026-05-29 15:16:24 -04:00
Adam Moussa
17ce1b918b Install boto3/pandas/awswrangler as test deps so handler tests import in CI 2026-05-29 15:11:19 -04:00
Adam Moussa
0678f3f46f Document CI-run test suite and coverage in README 2026-05-29 15:05:29 -04:00
Adam Moussa
f47757adf0 Add coverage reporting via pytest-cov 2026-05-29 15:02:47 -04:00
Adam Moussa
8e87fe669d Add tests for slack-post handler and slackio 2026-05-29 15:01:25 -04:00
Adam Moussa
76f60abade Add per-bucket and precedence tests for comment intent 2026-05-29 14:59:40 -04:00
Adam Moussa
e555a75d97 Add tests for the Haiku fallback 2026-05-29 14:54:47 -04:00
Adam Moussa
48c030ed13 Add tests for the classifier handler transforms 2026-05-29 14:52:53 -04:00
Adam Moussa
63b6f11bf6 Add tests for the Slack interactions endpoint 2026-05-29 14:33:26 -04:00
Adam Moussa
817e1f6a74 Add synthetic export fixture and run classification quality gate in CI 2026-05-29 14:30:44 -04:00
Adam Moussa
1a126c8179 Enable test execution in CI 2026-05-29 14:30:44 -04:00
Adam Moussa
dcbb0606e6 Add pytest config and conftest for test discovery 2026-05-29 14:30:44 -04:00
Adam Moussa
54ef5400b1
Merge pull request #13 from Sea-Haven-Industries/feature/phase-6-docs
Some checks are pending
Deploy / deploy (push) Waiting to run
Details 
Phase 6: docs and re-enable CD on merge
 2026-05-29 14:03:59 -04:00
Adam Moussa
6ddcd56f6c
Merge pull request #11 from Sea-Haven-Industries/feature/phase-5-grafana 
Phase 5: self-hosted Grafana (EC2, ALB, dashboards-as-code)
 2026-05-29 13:58:30 -04:00
Adam Moussa
c41836b319
Merge pull request #10 from Sea-Haven-Industries/feature/phase-4-slack 
Phase 4: Slack post + interactions Lambdas (drill-down modals)
 2026-05-29 13:55:24 -04:00
Adam Moussa
4cc58f5683
Merge pull request #9 from Sea-Haven-Industries/feature/phase-3-analytics
Some checks are pending
Deploy / deploy (push) Waiting to run
Details 
Phase 3: analytics dataset (Glue projection table + Athena)
 2026-05-29 13:49:47 -04:00
Adam Moussa
0e96cb59d7
Merge pull request #8 from Sea-Haven-Industries/feature/phase-2-classifier 
Phase 2: two-axis classifier Lambda
 2026-05-29 13:43:59 -04:00
Adam Moussa
9ee3d84fe0 Enable QEMU for arm64 Lambda bundling in CI/CD 2026-05-29 13:37:01 -04:00
Adam Moussa
0ca738ca8c Enable QEMU for arm64 Lambda bundling in CI/CD 2026-05-29 13:37:00 -04:00
Adam Moussa
c4b9bd4305 Enable QEMU for arm64 Lambda bundling in CI/CD 2026-05-29 13:36:59 -04:00
Adam Moussa
5106853cb9 Enable QEMU for arm64 Lambda bundling in CI/CD 2026-05-29 13:36:58 -04:00
Adam Moussa
d33b82bd92 Enable QEMU for arm64 Lambda bundling in CI/CD 2026-05-29 13:36:56 -04:00
Adam Moussa
9346e29763
Merge pull request #7 from Sea-Haven-Industries/feature/phase-1-ingestion 
Phase 1: add drop-folder ingestion and scoped uploader IAM user (Phase 1)
 2026-05-29 13:24:07 -04:00
Adam Moussa
f86b4ba1c5
Merge pull request #6 from Sea-Haven-Industries/feature/phase-0-scaffold 
Phase 0: scaffold apm-wo-analysis repository
 2026-05-29 13:14:37 -04:00
Adam Moussa
1a231131bd Revert "Temporarily disable CD deploy during stack merges" 
This reverts commit 611979e44e.
 2026-05-29 13:07:02 -04:00
Adam Moussa
fee0fe9a2c Merge phase-0 to carry the CD-disable into phase-6 for an explicit revert 2026-05-29 13:06:57 -04:00