chore: add CI and Security workflows, drop the dead and deploy-only ones [#5] by nisargabd · Pull Request #14 · OpenAgriNet/network-adapter

chore: drop the dead and deploy-only GitHub Actions workflows [#5]

manjudr

committed

6220fc4

chore: drop the release workflow and revert the DHI image migration [#5]

manjudr

committed

56f7d8b

fix: bump crypto, grpc and amqp091-go past the HIGH/CRITICAL advisories [#5]

manjudr

committed

26e013f

refactor: move the CI implementation into the Makefile [#5]

manjudr

committed

e99044b

refactor: rename Run Tests to CI and reduce it to make calls [#5]

manjudr

committed

8236623

refactor: split Security into dependency-scan, image-scan and security-gate [#5]

manjudr

committed

4f79614

ci: cancel a PR's superseded runs, keep the verdict on trunk commits [#5]

manjudr

committed

6e68413

build: add lint-actions, lint-staged and a versioned pre-commit hook [#5]

manjudr

committed

c62e192

chore: cut CI down to four checks and publish the image on a tag [#5]

manjudr

committed

00140c9

ci: move the tag jobs to their own workflow so PRs stop showing them [#5]

manjudr

committed

3ab7fc7

ci: drop the SARIF upload — it was a third check, and it contradicted the gate [#5]

manjudr

committed

5a0f1bd

fix: bump the Go toolchain to 1.26.8 to clear 20 HIGH stdlib CVEs [#5]

manjudr

committed

eec90fd

chore: widen the Trivy gate to CRITICAL,HIGH,MEDIUM,LOW [#5]

manjudr

committed

84cb6b5

fix: fail image-publish on a failed create, and pin the trivy installer [#5]

manjudr

committed

138ffbe

Navigation Menu

Repository navigation

chore: add CI and Security workflows, drop the dead and deploy-only ones [#5] - #14

chore: add CI and Security workflows, drop the dead and deploy-only ones [#5]#14
manjudr merged 23 commits into
developmentfrom
chore/5-ci-cd-workflows

Commits on Sep 4, 2026

chore: add test, security and build-and-push CI workflows [#5]

fix: switch adapter runtime to a glibc-only DHI image, drop the shell dependency [#5]

fix: bump golang.org/x/crypto and google.golang.org/grpc to close known CVEs [#5]

fix: disable Terraform deploy's push trigger [#5]

chore: keep golang.org/x/crypto and google.golang.org/grpc at prior versions [#5]

fix: scope the DHI runtime switch to the plugins image only [#5]

fix: build and scan Dockerfile.adapter-with-plugins, not Dockerfile.adapter [#5]

fix: keep the plugin-building test packages out of the full-module race+coverage run [#5]

docs: drop the discovery-service reference from the Makefile header [#5]

Commits on Sep 7, 2026

chore: drop the dead and deploy-only GitHub Actions workflows [#5]

chore: drop the release workflow and revert the DHI image migration [#5]

fix: bump crypto, grpc and amqp091-go past the HIGH/CRITICAL advisories [#5]

refactor: move the CI implementation into the Makefile [#5]

refactor: rename Run Tests to CI and reduce it to make calls [#5]

refactor: split Security into dependency-scan, image-scan and security-gate [#5]

ci: cancel a PR's superseded runs, keep the verdict on trunk commits [#5]

build: add lint-actions, lint-staged and a versioned pre-commit hook [#5]

chore: cut CI down to four checks and publish the image on a tag [#5]

ci: move the tag jobs to their own workflow so PRs stop showing them [#5]

ci: drop the SARIF upload — it was a third check, and it contradicted the gate [#5]

fix: bump the Go toolchain to 1.26.8 to clear 20 HIGH stdlib CVEs [#5]

chore: widen the Trivy gate to CRITICAL,HIGH,MEDIUM,LOW [#5]

fix: fail image-publish on a failed create, and pin the trivy installer [#5]