Commit graph

9 commits

Author SHA1 Message Date
Adam Moussa
b3d14c2a9a
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) (#78) 2026-07-06 18:27:07 -04:00
Adam Moussa
750f0a9061
Repo hygiene: PR labeler + README badges + dependabot (INFRA-56/57/66) (#52) 2026-06-11 14:14:04 -04:00
Adam Moussa
b4e2db3b99
Add dependency-review caller workflow (#40)
* Add dependency-review caller workflow

Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.

* chore: retrigger checks

* chore: retrigger dep review

* chore: retrigger dep review (post-fix)
2026-06-05 12:26:28 -04:00
Adam Moussa
94a837c08c
Enable QEMU for arm64 Docker builds (#29)
Fargate task runs ARM64 but GHA runner is x86_64 — without QEMU
the Docker image gets built for the wrong architecture, causing
exec format error at container startup.
2026-05-08 17:48:19 -04:00
Adam Moussa
78ecba68ae
Add GitHub Actions deploy workflow (#28)
* Add GitHub Actions deploy workflow (OIDC)

* Add permissions block for OIDC token exchange

* Add concurrency control to prevent parallel deploys
2026-05-08 17:08:12 -04:00
Adam Moussa
bcd01d9918
Add CI workflow (#27) 2026-05-08 15:52:56 -04:00
Adam Moussa
11b5ccbf7f
Remove wrapper workflow — using required workflow via org ruleset (#21) 2026-05-06 19:58:56 -04:00
Adam Moussa
a2477f4c57
Add id-token: write permission for claude-code-action (#20) 2026-05-06 19:47:30 -04:00
Adam Moussa
f011108971
Add Claude Code review workflow (#18) 2026-05-06 18:12:07 -04:00