sharang
aabe7cd60b
The trivy-action does an internal actions/checkout against github.com/aquasecurity/trivy, which fails on Gitea (act_runner injects Gitea creds; clone returns exit 128). Switch to the same inline-download pattern we use for gitleaks. Refs: M0.2
design-tokens
Shared CSS variables + fonts consumed by product web components.
Part of the Breakpilot Platform. For the big picture see
platform/docs: Architecture · Infrastructure · Product Integration Spec · Implementation Plan
What this is
Shared CSS variables + fonts consumed by product web components. Scaffolded under milestone M5.1. See platform/docs for the full architecture context.
Plane: Control Owner: @sharang Status: pre-alpha Linked milestone: M5.1
Run locally
# prerequisites: see CONTRIBUTING.md for tooling once code lands
make dev # starts dependencies + this service on http://localhost:3000
make test # unit + integration
make e2e # only if this repo ships user-facing flows
Local secrets come from .env.local (gitignored). Template at .env.example.
Endpoints / surface
{{For services: list the top-level routes or commands. For libraries: list the public API entry points. For IaC: list the make targets.}}
Deployment
| Env | URL | How |
|---|---|---|
| dev | http://localhost:3000 |
make dev |
| stage | https://design-tokens.stage.yourplatform.com |
auto on merge to main |
| prod | https://design-tokens.yourplatform.com |
manual: tag vX.Y.Z + sign-off |
Rollback: orca rollout undo design-tokens --env={{env}}.
Observability
- Traces, logs, metrics: SigNoz — service name
design-tokens - Audit events: Tenant Registry
/audit(Retraced-shape schema) - On-call:
oncall@yourplatform.com· runbook atplatform/docs/runbooks/design-tokens.md
Contributing
See CONTRIBUTING.md. TL;DR: branch from main, open a PR, 1 review + green CI, squash-merge.
License
Proprietary — all rights reserved. Copyright (c) 2026 Sharang Parnerkar and Benjamin Boenisch. See LICENSE.