mirror of
https://github.com/Sea-Haven-Industries/forgejo.git
synced 2026-10-07 16:28:53 +00:00
Compare commits
1 commit
2def8a03fc
...
de2bd03edc
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
de2bd03edc |
4 changed files with 1 additions and 62 deletions
6
.github/dependabot.yml
vendored
6
.github/dependabot.yml
vendored
|
|
@ -4,8 +4,6 @@ updates:
|
||||||
directory: /
|
directory: /
|
||||||
schedule:
|
schedule:
|
||||||
interval: weekly
|
interval: weekly
|
||||||
commit-message:
|
|
||||||
prefix: "chore(deps)"
|
|
||||||
assignees:
|
assignees:
|
||||||
- amoussa1229
|
- amoussa1229
|
||||||
ignore:
|
ignore:
|
||||||
|
|
@ -21,8 +19,6 @@ updates:
|
||||||
directory: /
|
directory: /
|
||||||
schedule:
|
schedule:
|
||||||
interval: weekly
|
interval: weekly
|
||||||
commit-message:
|
|
||||||
prefix: "chore(deps)"
|
|
||||||
assignees:
|
assignees:
|
||||||
- amoussa1229
|
- amoussa1229
|
||||||
|
|
||||||
|
|
@ -30,7 +26,5 @@ updates:
|
||||||
directory: /lambda/backup-verification
|
directory: /lambda/backup-verification
|
||||||
schedule:
|
schedule:
|
||||||
interval: weekly
|
interval: weekly
|
||||||
commit-message:
|
|
||||||
prefix: "chore(deps)"
|
|
||||||
assignees:
|
assignees:
|
||||||
- amoussa1229
|
- amoussa1229
|
||||||
|
|
|
||||||
2
.github/workflows/deploy.yaml
vendored
2
.github/workflows/deploy.yaml
vendored
|
|
@ -13,7 +13,7 @@ concurrency:
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
deploy:
|
deploy:
|
||||||
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@81cf168170f356d1423d7736f7ce93fd6611ad53 # v1.0.4
|
uses: Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml@3f746774229d41770727e2e4fd63ed5f5555a8b3 # v1.0.3
|
||||||
with:
|
with:
|
||||||
node-version: "24"
|
node-version: "24"
|
||||||
enable-qemu: true
|
enable-qemu: true
|
||||||
|
|
|
||||||
22
.github/workflows/policy.yaml
vendored
22
.github/workflows/policy.yaml
vendored
|
|
@ -1,22 +0,0 @@
|
||||||
name: PR Policy
|
|
||||||
|
|
||||||
on:
|
|
||||||
pull_request:
|
|
||||||
types: [opened, reopened, synchronize, edited, labeled, unlabeled, ready_for_review]
|
|
||||||
|
|
||||||
concurrency:
|
|
||||||
group: "policy-${{ github.event.pull_request.number }}"
|
|
||||||
cancel-in-progress: true
|
|
||||||
|
|
||||||
permissions:
|
|
||||||
contents: read
|
|
||||||
issues: read
|
|
||||||
pull-requests: read
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
policy:
|
|
||||||
uses: Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml@7ac3528750b346f181347bb09f6af927a1c0aa14 # v1.0.6
|
|
||||||
secrets:
|
|
||||||
JIRA_CLOUD_ID: ${{ secrets.JIRA_CLOUD_ID }}
|
|
||||||
JIRA_SERVICE_ACCOUNT_EMAIL: ${{ secrets.JIRA_SERVICE_ACCOUNT_EMAIL }}
|
|
||||||
JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN }}
|
|
||||||
33
AGENTS.md
33
AGENTS.md
|
|
@ -1,33 +0,0 @@
|
||||||
# Sea Haven Org Governance
|
|
||||||
|
|
||||||
> Full engineering standards: [engineering-handbook](https://github.com/Sea-Haven-Industries/engineering-handbook).
|
|
||||||
|
|
||||||
## Branching and PRs
|
|
||||||
|
|
||||||
- Branch prefixes: `feature/`, `fix/`, `hotfix/`, `chore/`, `docs/`, `refactor/`, `release/`
|
|
||||||
- PR titles: `type(scope): description (DEV-123)` — Jira key required (DEV/PLAT/SEC)
|
|
||||||
- PR body sections (exact order): **Summary**, **Validation**, **Tests**, **Notes**
|
|
||||||
- Route work: DEV (product), PLAT (infra/platform), SEC (security)
|
|
||||||
|
|
||||||
## Commits
|
|
||||||
|
|
||||||
- Conventional Commits: `type(scope): description`
|
|
||||||
- Allowed types: `feat fix docs style refactor perf test build ci chore revert release`
|
|
||||||
- No AI-attribution footers
|
|
||||||
|
|
||||||
## Secrets and Security
|
|
||||||
|
|
||||||
- Secrets in AWS Secrets Manager only — never in code, env vars, logs, or commits
|
|
||||||
- Non-secret config in SSM Parameter Store
|
|
||||||
- IAM/IaC/payment/auth changes require security review
|
|
||||||
|
|
||||||
## CI and SHA Pins
|
|
||||||
|
|
||||||
Pin every GitHub Actions ref to a full commit SHA with an inline version comment:
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
uses: actions/checkout@abc123def456 # v4.1.0
|
|
||||||
```
|
|
||||||
|
|
||||||
The deterministic global pre-push security hook must not be bypassed (`--no-verify` requires
|
|
||||||
explicit approval). Linting stays in CI; do not gate on it locally.
|
|
||||||
Loading…
Add table
Reference in a new issue