ci.yml
yaml
sha256:91e875d4a97bb1e35f37992f803988d5713931f1782d870c371c50054574af22
Add fixture provenance retention deletion
Human
minor
⚠ breaking
44 days ago
| 1 | name: ci |
| 2 | |
| 3 | on: |
| 4 | pull_request: |
| 5 | push: |
| 6 | branches: [main] |
| 7 | |
| 8 | jobs: |
| 9 | scooling-lab: |
| 10 | name: scooling lab contract |
| 11 | runs-on: ubuntu-latest |
| 12 | steps: |
| 13 | - uses: actions/checkout@v6 |
| 14 | - uses: actions/setup-python@v6 |
| 15 | with: |
| 16 | python-version: "3.13" |
| 17 | - name: Run unittest suite (7 tiers) |
| 18 | run: PYTHONPATH=src python -m unittest discover -s tests |
| 19 | - name: Validate provenance schema guardrails |
| 20 | run: PYTHONPATH=src python -m scooling_lab.provenance --self-check |
| 21 | - name: Verify dependency BOM is current |
| 22 | run: PYTHONPATH=src python -m scooling_lab.bom --check --output DEPENDENCIES.md |
| 23 | |
| 24 | secret-scan: |
| 25 | name: secret scan |
| 26 | runs-on: ubuntu-latest |
| 27 | steps: |
| 28 | - uses: actions/checkout@v6 |
| 29 | with: |
| 30 | fetch-depth: 0 |
| 31 | - name: Install gitleaks |
| 32 | env: |
| 33 | GITLEAKS_VERSION: 8.24.3 |
| 34 | run: | |
| 35 | curl -sSfL "https://github.com/gitleaks/gitleaks/releases/download/v${GITLEAKS_VERSION}/gitleaks_${GITLEAKS_VERSION}_linux_x64.tar.gz" -o gitleaks.tar.gz |
| 36 | tar -xzf gitleaks.tar.gz gitleaks |
| 37 | sudo mv gitleaks /usr/local/bin/gitleaks |
| 38 | gitleaks version |
| 39 | - name: Scan for secrets |
| 40 | run: gitleaks detect --source . --redact |
File History
1 commit
sha256:91e875d4a97bb1e35f37992f803988d5713931f1782d870c371c50054574af22
Add fixture provenance retention deletion
Human
minor
⚠
44 days ago