Skip to content

Conversation

@rjaegers
Copy link
Member

🚀 Hey, I have created a Pull Request

Description of changes

✔️ Checklist

  • I have followed the contribution guidelines for this repository
  • I have added tests for new behavior, and have not broken any existing tests
  • I have added or updated relevant documentation
  • I have verified that all added components are accounted for in the SBOM

@rjaegers rjaegers requested a review from a team as a code owner October 16, 2025 08:42
Copilot AI review requested due to automatic review settings October 16, 2025 08:42
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Purpose: Align job and artifact naming with sanitized inputs and add runner architecture propagation, while renaming and broadening the sanitize workflow to cover more inputs.

  • Renamed sanitize workflow and expanded it to output runner architecture.
  • Adjusted downstream workflows to consume runner-arch and updated job/artifact names.
  • Simplified build workflow by removing per-matrix arch sanitization, relying on a single upstream value.

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 5 comments.

File Description
.github/workflows/wc-sanitize-inputs.yml Renames workflow and adds runner architecture output; modifies output descriptions.
.github/workflows/wc-integration-test.yml Adds runner-arch input and uses it for job naming and test report filenames.
.github/workflows/wc-build-push.yml Switches to new sanitize workflow, propagates runner-arch, changes job/artifact naming, removes per-build arch step.
.github/workflows/continuous-integration.yml Minor job name change (emoji removed) to match new naming approach.
Comments suppressed due to low confidence (1)

.github/workflows/wc-build-push.yml:1

  • Removal of the per-matrix architecture step (previously capturing arch inside each build job) eliminates accurate per-runner architecture detection; relying solely on sanitize-inputs' runner-arch can be incorrect for heterogeneous matrices. Reintroduce a per-job arch capture (similar to the removed step) and use that value for job and artifact naming.
# This is a lower-level re-usable workflow that builds and pushes

outputs:
image-basename:
description: "The sanitized base name of the image (without registry or tag)"
description: "The sanitized base name of the image"
Copy link

Copilot AI Oct 16, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The original description clarified exclusion of registry and tag; removing that reduces precision. Recommend restoring explicit scope: The sanitized base name of the image (excluding registry and tag).

Suggested change
description: "The sanitized base name of the image"
description: "The sanitized base name of the image (excluding registry and tag)"

Copilot uses AI. Check for mistakes.
value: ${{ jobs.sanitize.outputs.image-basename }}
image-name:
description: "The sanitized name of the image (without registry or tag)"
description: "The sanitized name of the image"
Copy link

Copilot AI Oct 16, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This description no longer states that the tag and registry are excluded, which can lead to misuse when composing full image references. Suggest: The sanitized image name (repository path without registry or tag).

Suggested change
description: "The sanitized name of the image"
description: "The sanitized image name (repository path without registry or tag)"

Copilot uses AI. Check for mistakes.
value: ${{ jobs.sanitize.outputs.image-name }}
fully-qualified-image-name:
description: "The fully qualified name of the image including registry (but without tag)"
description: "The fully qualified name of the image including registry"
Copy link

Copilot AI Oct 16, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The previous wording clarified that the tag was not included; current phrasing could imply tags are present. Suggest: The fully qualified image name including registry (no tag).

Suggested change
description: "The fully qualified name of the image including registry"
description: "The fully qualified image name including registry (no tag)"

Copilot uses AI. Check for mistakes.

build-push:
name: ${{ matrix.runner }}
name: Build (${{ needs.sanitize-inputs.outputs.runner-arch }})
Copy link

Copilot AI Oct 16, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Using a single runner-arch value from the sanitize job for every matrix entry can mislabel builds when matrix runners differ (e.g. mixing x64 and arm64), leading to misleading job names. Compute architecture within each matrix job (using RUNNER_ARCH) or incorporate matrix.runner into the name to ensure accuracy.

Suggested change
name: Build (${{ needs.sanitize-inputs.outputs.runner-arch }})
name: Build (${{ env.RUNNER_ARCH }})

Copilot uses AI. Check for mistakes.
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
with:
name: digests-${{ needs.sanitize-image-name.outputs.image-basename }}-${{ steps.devcontainer-arch.outputs.arch }}
name: digests-${{ needs.sanitize-inputs.outputs.image-basename }}-${{ needs.sanitize-inputs.outputs.runner-arch }}
Copy link

Copilot AI Oct 16, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Artifact name relies on a single upstream runner-arch; with multi-architecture matrix builds all artifacts may share the same name, reducing clarity and risking confusion when inspecting per-arch digests. Include a per-job architecture (e.g. from RUNNER_ARCH) or matrix.runner fragment to differentiate artifacts.

Suggested change
name: digests-${{ needs.sanitize-inputs.outputs.image-basename }}-${{ needs.sanitize-inputs.outputs.runner-arch }}
name: digests-${{ needs.sanitize-inputs.outputs.image-basename }}-${{ matrix.runner }}

Copilot uses AI. Check for mistakes.
@sonarqubecloud
Copy link

@rjaegers rjaegers closed this Oct 16, 2025
@rjaegers rjaegers deleted the ci/fix-sequence-in-name-issue branch October 16, 2025 08:49
@github-actions
Copy link
Contributor

Pull Request Report (#979)

Static measures

Description Value
Number of added lines 47
Number of deleted lines 42
Number of changed files 5
Number of commits 2
Number of reviews 1
Number of comments (w/o review comments) 1
Number of reviews that contains a comment to resolve 1
Number of reviews that requested a change from the author 0
Number of reviews that approved the Pull Request 0
Get the total number of participants of a Pull Request 3

Time related measures

Description Value
PR lead time (from creation to close of PR) 6.2 Min
Time that was spend on the branch before the PR was created 24 Sec
Time that was spend on the branch before the PR was merged 0 Sec
Time to merge after last review 0 Sec

Status check related measures

Description Value
Total runtime for last status check run (Workflow for PR) 16.7 Min
Total time spend in last status check run on PR 3.9 Min

@github-actions
Copy link
Contributor

MegaLinter analysis: Success

Descriptor Linter Files Fixed Errors Warnings Elapsed time
✅ ACTION actionlint 22 0 0 0.58s
✅ DOCKERFILE hadolint 2 0 0 0.72s
✅ GHERKIN gherkin-lint 6 0 0 2.28s
✅ JSON npm-package-json-lint yes no no 0.32s
✅ JSON prettier 15 2 0 0 0.35s
✅ JSON v8r 15 0 0 33.49s
✅ MARKDOWN markdownlint 11 0 0 0 0.97s
✅ MARKDOWN markdown-table-formatter 11 0 0 0 0.26s
✅ REPOSITORY gitleaks yes no no 0.68s
✅ REPOSITORY git_diff yes no no 0.01s
✅ REPOSITORY grype yes no no 27.87s
✅ REPOSITORY secretlint yes no no 1.03s
✅ REPOSITORY syft yes no no 2.54s
✅ REPOSITORY trivy yes no no 7.16s
✅ REPOSITORY trivy-sbom yes no no 0.24s
✅ REPOSITORY trufflehog yes no no 3.5s
✅ SPELL lychee 73 0 0 21.49s
✅ YAML prettier 28 0 0 0 0.93s
✅ YAML v8r 28 0 0 17.01s
✅ YAML yamllint 28 0 0 0.79s

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx [email protected] --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,DOCKERFILE_HADOLINT,GHERKIN_GHERKIN_LINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

MegaLinter is graciously provided by OX Security

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants