mirror of
https://github.com/Sea-Haven-Industries/shoc-frontend-new.git
synced 2026-09-30 06:53:12 +00:00
c96a259365
Some checks failed
Deploy dev content / Deploy shoc-frontend-new-dev through Terraform (push) Has been cancelled
* ci(cd): convert SPA hosting to handbook HCP and GitHub content CD Give HCP the bucket and CloudFront with an empty origin path. GitHub owns bucket-root sync and invalidation so merge-to-main and a human staging tag can deploy without creating HCP runs. G13 fails PRs that mix terraform/ with deployable application files. * ci: run Frontend checks and Terraform CI on PRs to main and dev Match backend 148 so a PR targeting origin/dev still gets the required checks. Push remains main only. * refactor(terraform): keep live/dev and live/staging as HCP roots Leave the adopted working directories in place so this CD PR does not retarget two live HCP workspaces. Flattening stays a later change. * style: prettier terraform-validate.mjs * fix(terraform): pin githubdeploy assume-role policy in import checker Reject controlled role updates whose trust document is not the rendered GitHub OIDC policy, matching the bucket-policy pin. |
||
|---|---|---|
| .. | ||
| testdata/terraform-release-plans | ||
| check-github-workflows.sh | ||
| check-terraform-import-plan.py | ||
| check-terraform-release-plan.py | ||
| check_app_terraform_isolation.py | ||
| deploy-web.sh | ||
| governance-baseline.json | ||
| governance-check.mjs | ||
| hcp-run-guard.py | ||
| read-release-pointer.py | ||
| summarize-cloudfront-live-state.sh | ||
| terraform-validate.mjs | ||
| terraform_import_plan_resources.py | ||
| test-hcp-run-guard.py | ||
| test-terraform-import-plan-check.py | ||
| test-terraform-release-plan-check.py | ||
| test-verify-cloudfront-release.sh | ||
| test_check_app_terraform_isolation.py | ||
| upload-sourcemaps.sh | ||
| vendor-e2e-mock-server.mjs | ||
| verify-cloudfront-release.sh | ||