mirror of
https://github.com/Sea-Haven-Industries/forgejo.git
synced 2026-10-07 16:28:53 +00:00
Compare commits
1 commit
2def8a03fc
...
de2bd03edc
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
de2bd03edc |
4 changed files with 1 additions and 62 deletions
6
.github/dependabot.yml
vendored
6
.github/dependabot.yml
vendored
|
|
@ -4,8 +4,6 @@ updates:
|
|||
directory: /
|
||||
schedule:
|
||||
interval: weekly
|
||||
commit-message:
|
||||
prefix: "chore(deps)"
|
||||
assignees:
|
||||
- amoussa1229
|
||||
ignore:
|
||||
|
|
@ -21,8 +19,6 @@ updates:
|
|||
directory: /
|
||||
schedule:
|
||||
interval: weekly
|
||||
commit-message:
|
||||
prefix: "chore(deps)"
|
||||
assignees:
|
||||
- amoussa1229
|
||||
|
||||
|
|
@ -30,7 +26,5 @@ updates:
|
|||
directory: /lambda/backup-verification
|
||||
schedule:
|
||||
interval: weekly
|
||||
commit-message:
|
||||
prefix: "chore(deps)"
|
||||
assignees:
|
||||
- amoussa1229
|
||||
|
|
|
|||
2
.github/workflows/deploy.yaml
vendored
2
.github/workflows/deploy.yaml
vendored
|
|
@ -13,7 +13,7 @@ concurrency:
|
|||
|
||||
jobs:
|
||||
deploy:
|
||||
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@81cf168170f356d1423d7736f7ce93fd6611ad53 # v1.0.4
|
||||
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@3f746774229d41770727e2e4fd63ed5f5555a8b3 # v1.0.3
|
||||
with:
|
||||
node-version: "24"
|
||||
enable-qemu: true
|
||||
|
|
|
|||
22
.github/workflows/policy.yaml
vendored
22
.github/workflows/policy.yaml
vendored
|
|
@ -1,22 +0,0 @@
|
|||
name: PR Policy
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
types: [opened, reopened, synchronize, edited, labeled, unlabeled, ready_for_review]
|
||||
|
||||
concurrency:
|
||||
group: "policy-${{ github.event.pull_request.number }}"
|
||||
cancel-in-progress: true
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
issues: read
|
||||
pull-requests: read
|
||||
|
||||
jobs:
|
||||
policy:
|
||||
uses: Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml@7ac3528750b346f181347bb09f6af927a1c0aa14 # v1.0.6
|
||||
secrets:
|
||||
JIRA_CLOUD_ID: ${{ secrets.JIRA_CLOUD_ID }}
|
||||
JIRA_SERVICE_ACCOUNT_EMAIL: ${{ secrets.JIRA_SERVICE_ACCOUNT_EMAIL }}
|
||||
JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN }}
|
||||
33
AGENTS.md
33
AGENTS.md
|
|
@ -1,33 +0,0 @@
|
|||
# Sea Haven Org Governance
|
||||
|
||||
> Full engineering standards: [engineering-handbook](https://github.com/Sea-Haven-Industries/engineering-handbook).
|
||||
|
||||
## Branching and PRs
|
||||
|
||||
- Branch prefixes: `feature/`, `fix/`, `hotfix/`, `chore/`, `docs/`, `refactor/`, `release/`
|
||||
- PR titles: `type(scope): description (DEV-123)` — Jira key required (DEV/PLAT/SEC)
|
||||
- PR body sections (exact order): **Summary**, **Validation**, **Tests**, **Notes**
|
||||
- Route work: DEV (product), PLAT (infra/platform), SEC (security)
|
||||
|
||||
## Commits
|
||||
|
||||
- Conventional Commits: `type(scope): description`
|
||||
- Allowed types: `feat fix docs style refactor perf test build ci chore revert release`
|
||||
- No AI-attribution footers
|
||||
|
||||
## Secrets and Security
|
||||
|
||||
- Secrets in AWS Secrets Manager only — never in code, env vars, logs, or commits
|
||||
- Non-secret config in SSM Parameter Store
|
||||
- IAM/IaC/payment/auth changes require security review
|
||||
|
||||
## CI and SHA Pins
|
||||
|
||||
Pin every GitHub Actions ref to a full commit SHA with an inline version comment:
|
||||
|
||||
```yaml
|
||||
uses: actions/checkout@abc123def456 # v4.1.0
|
||||
```
|
||||
|
||||
The deterministic global pre-push security hook must not be bypassed (`--no-verify` requires
|
||||
explicit approval). Linting stays in CI; do not gate on it locally.
|
||||
Loading…
Add table
Reference in a new issue