Skip to content

Commit f755dd3

Browse files
committed
chore: clean up old GitHub workflow files across stock repositories
Removed outdated files from .github/workflows while preserving the directory structure. Prepares repositories for syncing updated and production-grade workflows.
1 parent d05ab2c commit f755dd3

40 files changed

+578
-157
lines changed
Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
---
2+
name: 🧪 Auditwheel Compatibility
3+
on:
4+
workflow_dispatch:
5+
jobs:
6+
auditwheel:
7+
runs-on: ubuntu-latest
8+
container: quay.io/pypa/manylinux2014_x86_64
9+
steps:
10+
- uses: actions/checkout@v4
11+
- run: pip install build
12+
- run: python -m build
13+
- run: auditwheel show dist/*.whl
Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
---
2+
name: 🔁 Auto Rebase Pull Requests
3+
on:
4+
schedule:
5+
- cron: 0 5 * * *
6+
jobs:
7+
rebase:
8+
runs-on: ubuntu-latest
9+
steps:
10+
- uses: actions/checkout@v4
11+
- uses: cirrus-actions/rebase@v1
12+
env:
13+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/Bandit Security Scan.yml

Lines changed: 0 additions & 29 deletions
This file was deleted.
Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
---
2+
name: 📈 Code Coverage
3+
on:
4+
push:
5+
branches: [main]
6+
pull_request:
7+
jobs:
8+
coverage:
9+
runs-on: ubuntu-latest
10+
steps:
11+
- uses: actions/checkout@v4
12+
- uses: actions/setup-python@v5
13+
with:
14+
python-version: '3.11'
15+
- run: pip install -e .[dev]
16+
- run: pytest --cov=src --cov-report=xml
17+
- uses: codecov/codecov-action@v4

.github/workflows/Deploy Mkdocs Documentation.yml

Lines changed: 0 additions & 26 deletions
This file was deleted.
Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
---
2+
name: 🚀 GitHub Release & Artifact Upload
3+
on:
4+
push:
5+
tags:
6+
- v*.*.* # Trigger only for semantic version tags
7+
permissions:
8+
contents: write # Required to create releases
9+
actions: read # Needed to access artifacts from previous jobs
10+
jobs:
11+
release:
12+
name: Create GitHub Release with SBOM and Audit
13+
runs-on: ubuntu-latest
14+
steps:
15+
- name: Checkout source code
16+
uses: actions/checkout@v4
17+
- name: Download SBOM
18+
uses: actions/download-artifact@v4
19+
with:
20+
name: sbom
21+
path: artifacts/
22+
- name: Download pip-audit report
23+
uses: actions/download-artifact@v4
24+
with:
25+
name: pip-audit-report
26+
path: artifacts/
27+
- name: Create GitHub release
28+
uses: softprops/action-gh-release@v2
29+
with:
30+
tag_name: ${{ github.ref_name }}
31+
name: Release ${{ github.ref_name }}
32+
body: |
33+
Automated release with attached:
34+
- ✅ SBOM (bom.json)
35+
- ✅ Vulnerability report (pip-audit.json)
36+
- ✅ Provenance (intoto.jsonl in SLSA workflow)
37+
files: |
38+
artifacts/bom.json
39+
artifacts/pip-audit.json
40+
env:
41+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
---
2+
name: 🧪 GitHub Workflow Lint
3+
on: [push, pull_request]
4+
jobs:
5+
lint:
6+
runs-on: ubuntu-latest
7+
steps:
8+
- uses: actions/checkout@v4
9+
- name: Super Linter
10+
uses: github/super-linter@v6
11+
env:
12+
VALIDATE_ALL_CODEBASE: false
13+
VALIDATE_YAML: true
14+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
---
2+
name: 🧼 Ignore File Consistency Check
3+
on: [push, pull_request]
4+
jobs:
5+
validate:
6+
runs-on: ubuntu-latest
7+
steps:
8+
- uses: actions/checkout@v4
9+
- name: Check for overlap in ignore files
10+
run: |-
11+
echo "Checking .gitignore vs .dockerignore vs MANIFEST.in"
12+
grep -v '^#' .gitignore | sort > .tmp.gitignore
13+
grep -v '^#' .dockerignore | sort > .tmp.dockerignore || true
14+
grep -v '^#' MANIFEST.in | sort > .tmp.manifest || true
15+
echo "--- .gitignore not in .dockerignore:"
16+
comm -23 .tmp.gitignore .tmp.dockerignore || true
17+
echo "--- .gitignore not in MANIFEST.in:"
18+
comm -23 .tmp.gitignore .tmp.manifest || true
Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
---
2+
name: 📚 License Checker
3+
on:
4+
push:
5+
branches: [main]
6+
workflow_dispatch:
7+
jobs:
8+
license-check:
9+
runs-on: ubuntu-latest
10+
steps:
11+
- uses: actions/checkout@v4
12+
- uses: actions/setup-python@v5
13+
with:
14+
python-version: 3.11
15+
- run: pip install pip-licenses
16+
- run: pip-licenses --format=markdown --with-urls --output-file=licenses.md
17+
- uses: actions/upload-artifact@v4
18+
with:
19+
name: license-report
20+
path: licenses.md
Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
---
2+
name: 🧾 License Report
3+
on:
4+
workflow_dispatch:
5+
push:
6+
branches: [main]
7+
permissions:
8+
contents: read
9+
jobs:
10+
license-check:
11+
name: License Check with pip-licenses
12+
runs-on: ubuntu-latest
13+
steps:
14+
- name: Checkout repository
15+
uses: actions/checkout@v4
16+
- name: Set up Python
17+
uses: actions/setup-python@v5
18+
with:
19+
python-version: '3.11'
20+
- name: Install pip-licenses
21+
run: pip install pip-licenses
22+
- name: Generate license report
23+
run: |
24+
pip-licenses --from=mixed --format=markdown | tee license-report.md
25+
- name: Upload license report
26+
uses: actions/upload-artifact@v4
27+
with:
28+
name: license-report
29+
path: license-report.md
30+
retention-days: 30

0 commit comments

Comments
 (0)