Skip to content

workflows-reference.md

Latest commit

 

History

History
57 lines (46 loc) · 2.19 KB

workflows-reference.md

File metadata and controls

57 lines (46 loc) · 2.19 KB

Workflows Reference

Canonical reference for repository automation in .github/workflows/.

Workflow topology

flowchart LR
    PR[Pull request / push] --> CI[ci.yml]
    PR --> Secrets[secrets.yml]
    PR --> CodeQL[codeql.yml]
    CI -->|success on main| Release[release.yml]
    Manual[workflow_dispatch] --> TestRelease[test-release.yml]
Loading

Workflow inventory

Workflow Trigger Purpose Key gate
ci.yml PRs + pushes to main Lint, typecheck, tests, E2E, package checks Fails fast on quality regressions
release.yml workflow_run after CI success on main Semantic versioning + TestPyPI/PyPI publish + GitHub release Requires successful CI and release-commit recursion guard
test-release.yml Manual dispatch Preview semantic-release result without publishing No-op semantic release mode
secrets.yml PRs + pushes to main Secret scanning with gitleaks Detects leaked credentials early
codeql.yml PRs, pushes to main, weekly schedule Static security analysis Uploads security alerts to GitHub Security tab

CI checks (from ci.yml)

  • Commit message linting on pull requests
  • Workflow linting (actionlint)
  • Ruff lint + format check
  • Docs local-link integrity (poetry run poe docs-links): scans all root-level *.md files and docs/**/*.md; exits 0 (success) when no broken links are found, exits 1 (failure) when broken links are detected; external URLs and anchor-only fragments are ignored; no dry-run mode
  • Mypy type-check (poetry run poe typecheck)
  • Unit/integration test matrix across Python 3.11-3.13
  • E2E suite job
  • Build + package metadata validation

Release gates (from release.yml)

flowchart TD
    A[CI workflow_run success on main] --> B{release commit?}
    B -->|yes| X[skip release]
    B -->|no| C[python-semantic-release]
    C --> D{new version?}
    D -->|no| X
    D -->|yes| E[build artifacts]
    E --> F[publish TestPyPI]
    F --> G[smoke test]
    G -->|pass| H[publish PyPI]
    H --> I[create GitHub release]
Loading

Related