Skip to content

Conversation

@yxtay
Copy link
Owner

@yxtay yxtay commented Oct 7, 2025

No description provided.

@gemini-code-assist
Copy link

Summary of Changes

Hello @yxtay, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This PR removes all configuration files related to Trunk CI/CD, effectively discontinuing its use in the project. The changes involve the deletion of .trunk/configs/.markdownlint.yaml, .trunk/configs/.yamllint.yaml, and the primary .trunk/trunk.yaml file, which managed various linters and CI actions.

Highlights

  • Intent: This pull request aims to completely remove the Trunk CI/CD integration and its associated configuration from the repository. This is indicated by the PR title 'ci: remove-trunk' and the deletion of all Trunk-related configuration files.
  • Changes Summary: The pull request removes three files from the .trunk/ directory:
  1. .trunk/configs/.markdownlint.yaml: Deletes the markdownlint configuration specific to Trunk.
  2. .trunk/configs/.yamllint.yaml: Deletes the yamllint configuration specific to Trunk.
  3. .trunk/trunk.yaml: Deletes the main Trunk configuration file, which defined its CLI version, plugins, runtimes (Node.js, Python), and a comprehensive list of enabled linters (e.g., yamlfmt, actionlint, bandit, biome, black, prettier, ruff, yamllint, etc.) and actions.
Ignored Files
  • Ignored by pattern: .github/workflows/** (1)
    • .github/workflows/scans.yml
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@yxtay yxtay merged commit 6383732 into main Oct 7, 2025
25 of 31 checks passed
@yxtay yxtay deleted the ci/remove-trunk branch October 7, 2025 05:38
@github-actions github-actions bot added the ci label Oct 7, 2025
Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request removes the Trunk.io integration from the repository by deleting its configuration files. This is a significant change as it removes the project's centralized linting, formatting, and code quality enforcement tool. While the file deletions are straightforward, the pull request lacks a description explaining the rationale behind this removal. It's crucial to document why Trunk.io is being removed and what, if anything, will replace it to maintain code quality standards. Please update the pull request description with this information.

@github-actions github-actions bot added the size/M label Oct 7, 2025
@github-actions
Copy link
Contributor

github-actions bot commented Oct 7, 2025

kics-logo

KICS version: v2.1.14

Category Results
CRITICAL CRITICAL 0
HIGH HIGH 0
MEDIUM MEDIUM 4
LOW LOW 0
INFO INFO 0
TRACE TRACE 0
TOTAL TOTAL 4
Metric Values
Files scanned placeholder 7
Files parsed placeholder 7
Files failed to scan placeholder 0
Total executed queries placeholder 73
Queries failed to execute placeholder 0
Execution time placeholder 1

Queries Results

Query Name Query Id Severity Platform Cwe Category Experimental Description File Name Line Issue Type Search Key Expected Value Actual Value
Apt Get Install Pin Version Not Defined 965a08d7-ef86-4f14-8792-4a3b2098937e MEDIUM Dockerfile 1357 Supply-Chain false When installing a package, its pin version should be defined Dockerfile 36 MissingAttribute FROM={{debian:stable-slim@sha256:d6743b7859c917a488ca39f4ab5e174011305f50b44ce32d3b9ea5d81b291b3b AS base}}.RUN={{apt-get update && apt-get upgrade --yes && apt-get install --yes --no-install-recommends curl && rm -rf /var/lib/apt/lists/*}} Package 'curl' has version defined Package 'curl' does not have version defined
Apt Get Install Pin Version Not Defined 965a08d7-ef86-4f14-8792-4a3b2098937e MEDIUM Dockerfile 1357 Supply-Chain false When installing a package, its pin version should be defined Dockerfile 94 MissingAttribute FROM={{dev AS compile}}.RUN={{apt-get update && apt-get install --yes --no-install-recommends binutils patchelf && rm -rf /var/lib/apt/lists/*}} Package 'patchelf' has version defined Package 'patchelf' does not have version defined
Apt Get Install Pin Version Not Defined 965a08d7-ef86-4f14-8792-4a3b2098937e MEDIUM Dockerfile 1357 Supply-Chain false When installing a package, its pin version should be defined Dockerfile 94 MissingAttribute FROM={{dev AS compile}}.RUN={{apt-get update && apt-get install --yes --no-install-recommends binutils patchelf && rm -rf /var/lib/apt/lists/*}} Package 'binutils' has version defined Package 'binutils' does not have version defined
Apt Get Install Pin Version Not Defined 965a08d7-ef86-4f14-8792-4a3b2098937e MEDIUM Dockerfile 1357 Supply-Chain false When installing a package, its pin version should be defined Dockerfile 46 MissingAttribute FROM={{base AS dev}}.RUN={{apt-get update && apt-get install --yes --no-install-recommends build-essential && rm -rf /var/lib/apt/lists/*}} Package 'build-essential' has version defined Package 'build-essential' does not have version defined

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants