mirror of
https://github.com/Sea-Haven-Industries/proposal-system.git
synced 2026-09-30 11:13:14 +00:00
9d856a9619
Some checks failed
Deploy / Deploy to AWS (push) Has been cancelled
## Summary Implements Phase 3 of the AUDIT-2026-05-20 findings: - 29 FIX-severity items across API, web, infra, and lambdas - 7 accessibility NITs (aria-labels, document titles) - 4 code quality NITs (deduplication, constants extraction) Key changes: - API: N+1 fix, pagination clamping, idempotent transitions, upload confirm endpoint, revision TotalBidAmount carry-forward - Web: confirmation dialogs, currency formatting, error states, date range filters, document titles - Infra: S3 CORS lockdown, API Gateway throttling, AOSS network policy fix, CI concurrency - Lambdas: skip empty suggestions, remove status side-effect - Scripts: post-deploy health check ## Test plan - [x] tsc --noEmit (web + infra) - [x] dotnet build (api) - [x] ruff check + format (lambdas) - [x] Cross-review via orchestrator (no blockers) [skip deploy]
65 lines
1.6 KiB
YAML
65 lines
1.6 KiB
YAML
name: CI
|
|
|
|
on:
|
|
pull_request:
|
|
branches: [main]
|
|
paths-ignore:
|
|
- '*.md'
|
|
- 'docs/**'
|
|
- 'AUDIT-*.md'
|
|
- '.claude/**'
|
|
- 'LICENSE'
|
|
|
|
concurrency:
|
|
group: ci-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
dotnet:
|
|
name: .NET Build & Test
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/ci-dotnet.yaml@main
|
|
with:
|
|
working-directory: api
|
|
solution: ProposalSystem.sln
|
|
|
|
web:
|
|
name: Web Frontend Check
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@main
|
|
with:
|
|
working-directory: web
|
|
cache-dependency-path: web/package-lock.json
|
|
node-version: "24"
|
|
run-cdk-synth: false
|
|
run-conventions-check: false
|
|
|
|
python:
|
|
name: Python Lint
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml@main
|
|
with:
|
|
source-dirs: "lambdas/"
|
|
run-sam-validate: false
|
|
run-conventions-check: false
|
|
|
|
mobile:
|
|
name: Mobile Typecheck
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@main
|
|
with:
|
|
working-directory: mobile
|
|
cache-dependency-path: mobile/package-lock.json
|
|
node-version: "24"
|
|
run-cdk-synth: false
|
|
run-conventions-check: false
|
|
|
|
infra:
|
|
name: CDK Synth
|
|
uses: Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml@main
|
|
with:
|
|
working-directory: infra
|
|
cache-dependency-path: infra/package-lock.json
|
|
node-version: "24"
|
|
dotnet-version: "8.0.x"
|
|
dotnet-publish-project: api/src/ProposalSystem.Api/ProposalSystem.Api.csproj
|
|
run-typecheck: false
|