seed-data

4 Commits

Author	SHA1	Message	Date
sharang	50d03133d9	ci: replace aquasecurity/trivy-action with inline binary ci / shared (pull_request) Failing after 3s Details The trivy-action does an internal actions/checkout against github.com/aquasecurity/trivy, which fails on Gitea (act_runner injects Gitea creds; clone returns exit 128). Switch to the same inline-download pattern we use for gitleaks. Refs: M0.2	2026-05-18 21:36:14 +02:00
sharang	d9b49819c1	ci: rework workflow for Gitea Actions (M0.2) ci / shared (pull_request) Failing after 33s Details The original ci.yaml used wagoid/commitlint-github-action and gitleaks/gitleaks-action, both of which hit GitHub-specific API endpoints that 404 on Gitea ("error trying to get list of pull request's commits: not found"). Changes: - commitlint: bash regex against Conventional Commits, scoped to the PR commit range. Zero external deps. - gitleaks: inline tarball download + binary run, exit-code 1 on any finding. - trivy: unchanged (works fine; uses local fs scan). - Per-stack test/image/e2e jobs now gated on hashFiles(go.sum) / hashFiles(package.json) / hashFiles(Dockerfile) so they skip cleanly on empty repos and light up automatically when real code lands (M4.1, M5.1, etc.). Refs: M0.2	2026-05-18 21:34:08 +02:00
sharang	c6057bf23b	chore: bootstrap repo scaffolding (M0.1) ci / shared (push) Failing after 5s Details Bootstraps §1.2 scaffolding (README, CONTRIBUTING, CODEOWNERS, CHANGELOG, PR + issue templates, LICENSE, CI workflow, release workflow, commitlint, cliff, .editorconfig, .gitignore, .env.example) and ships a proprietary all-rights-reserved LICENSE naming both founders. Refs: M0.1	2026-05-18 19:15:38 +00:00
sharang	02ea93944c	Initial commit	2026-05-18 19:05:36 +00:00