Merge remote-tracking branch 'origin/master' into audit-netlify

Author: SunDevil311

.env.template

@@ -5,7 +5,7 @@
 # Rename to `.env` (or `.env.local`) and customize as needed
 
 # Custom environment mode for scripts and tooling
-# One of: dev, test, ci, preview, production
+# One of: dev, test, ci, audit, production
 ENV_MODE=dev
 
 # Optional: API keys or tokens for local dev (never commit real values)

.github/workflows/auto-assign.yml

@@ -25,6 +25,8 @@ on:
 jobs:
   auto-assign:
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: 'Auto-assign issue or PR'

.github/workflows/backup-branch.yml

@@ -22,6 +22,8 @@ jobs:
     name: Sync backup/nightly-snapshot to master
     runs-on: ubuntu-24.04
     if: github.ref == 'refs/heads/master' && github.event_name != 'pull_request'
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: Checkout master branch

.github/workflows/build-and-publish.yml

@@ -42,11 +42,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable
@@ -132,11 +127,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable
@@ -193,11 +183,6 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
 
-      #- name: Show Node.js and npm versions
-      #  run: |
-      #    echo "Node.js version: $(node -v)"
-      #    echo "npm version: $(npm -v)"
-
       - name: Upgrade npm
         run: |
           corepack enable

.github/workflows/check-security-txt-expiry.yml

@@ -12,6 +12,8 @@ jobs:
   check-expiry:
     runs-on: ubuntu-latest
     name: Validate .well-known/security.txt expiration
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: Checkout repo

.github/workflows/dependency-review.yml

@@ -13,6 +13,8 @@ permissions:
 jobs:
   dependency-review:
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: 'Checkout Repository'

.github/workflows/meta-check.yml

@@ -18,6 +18,9 @@ permissions:
 jobs:
   meta:
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
+
     steps:
       - name: Checkout repo
         uses: actions/checkout@v5

.github/workflows/prevent-audit-merge.yml

@@ -16,6 +16,9 @@ permissions:
 jobs:
   check-branch:
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
+
     steps:
       - name: Fail if source is audit-netlify
         run: |

.github/workflows/secret-scan.yml

@@ -21,6 +21,8 @@ jobs:
       issues: write
     env:
       CODEQL_ACTION_ANALYSIS_KEY: gitleaks
+      ENV_MODE: ci
+
     steps:
       # ---------------------------------------------------------------------
       # Checkout the full repo history (needed for Gitleaks to scan all commits)

.github/workflows/templates/check-codeql.template.yml

@@ -24,6 +24,8 @@ jobs:
   check:
     name: Check CodeQL Status
     runs-on: ubuntu-24.04
+    env:
+      ENV_MODE: ci
 
     steps:
       - name: Check CodeQL Workflow