Split update-project into create-project and update-project safe outputs #23552

Workflow file for this run

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	paths:
	- '**.go'
	- 'pkg/workflow/**'
	- 'actions/**'
	- '.github/workflows/ci.yml'
	- '.github/workflows/*/.md'
	workflow_dispatch:
	jobs:
	test:
	needs: [lint]
	runs-on: ubuntu-latest
	permissions:
	contents: read
	concurrency:
	group: ci-${{ github.ref }}-test
	cancel-in-progress: true
	steps:
	- name: Checkout code
	uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5

	- name: Set up Go
	id: setup-go
	uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
	with:
	go-version-file: go.mod
	cache: true

	- name: Report Go cache status
	run: \|
	if [ "${{ steps.setup-go.outputs.cache-hit }}" == "true" ]; then
	echo "✅ Go cache hit" >> $GITHUB_STEP_SUMMARY
	else
	echo "⚠️ Go cache miss" >> $GITHUB_STEP_SUMMARY
	fi

	- name: Verify dependencies
	run: go mod verify

	- name: Run unit tests with coverage
	run: \|
	go test -v -count=1 -timeout=3m -tags '!integration' -run='^Test' -coverprofile=coverage.out ./...
	go tool cover -html=coverage.out -o coverage.html

	# Coverage reports for recent builds only - 7 days is sufficient for debugging recent changes
	- name: Upload coverage report
	uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
	with:
	name: coverage-report
	path: coverage.html
	retention-days: 7

	integration:
	needs: [test]
	runs-on: ubuntu-latest
	permissions:
	contents: read
	strategy:
	fail-fast: false
	matrix:
	test-group:
	- name: "CLI Compile & Poutine"
	packages: "./pkg/cli"
	pattern: "TestCompile\|TestPoutine"
	- name: "CLI MCP Playwright"
	packages: "./pkg/cli"
	pattern: "TestMCPInspectPlaywright"
	- name: "CLI MCP Gateway"
	packages: "./pkg/cli"
	pattern: "TestMCPGateway"
	- name: "CLI MCP Other"
	packages: "./pkg/cli"
	pattern: "TestMCPAdd\|TestMCPInspectGitHub\|TestMCPServer\|TestMCPConfig"
	- name: "CLI Logs & Firewall"
	packages: "./pkg/cli"
	pattern: "TestLogs\|TestFirewall\|TestNoStopTime\|TestLocalWorkflow"
	- name: "Workflow"
	packages: "./pkg/workflow ./cmd/gh-aw"
	pattern: ""
	concurrency:
	group: ci-${{ github.ref }}-integration-${{ matrix.test-group.name }}
	cancel-in-progress: true
	name: "Integration: ${{ matrix.test-group.name }}"
	steps:
	- name: Checkout code
	uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5

	- name: Set up Go
	id: setup-go
	uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
	with:
	go-version-file: go.mod
	cache: true

	- name: Report Go cache status
	run: \|
	if [ "${{ steps.setup-go.outputs.cache-hit }}" == "true" ]; then
	echo "✅ Go cache hit" >> $GITHUB_STEP_SUMMARY
	else
	echo "⚠️ Go cache miss" >> $GITHUB_STEP_SUMMARY
	fi

	- name: Verify dependencies
	run: go mod verify

	- name: Run integration tests - ${{ matrix.test-group.name }}
	run: \|
	if [ -z "${{ matrix.test-group.pattern }}" ]; then
	go test -v -timeout=3m -tags 'integration' ${{ matrix.test-group.packages }}
	else
	go test -v -timeout=3m -tags 'integration' -run '${{ matrix.test-group.pattern }}' ${{ matrix.test-group.packages }}
	fi

	build:
	needs: [lint]
	runs-on: ubuntu-latest
	permissions:
	contents: read
	concurrency:
	group: ci-${{ github.ref }}-build
	cancel-in-progress: true
	steps:
	- name: Checkout code
	uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
	- name: Set up Node.js
	id: setup-node
	uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6
	with:
	node-version: "24"
	cache: npm
	cache-dependency-path: pkg/workflow/js/package-lock.json
	- name: Report Node cache status
	run: \|
	if [ "${{ steps.setup-node.outputs.cache-hit }}" == "true" ]; then
	echo "✅ Node cache hit" >> $GITHUB_STEP_SUMMARY
	else
	echo "⚠️ Node cache miss" >> $GITHUB_STEP_SUMMARY
	fi
	- name: Set up Go
	id: setup-go
	uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
	with:
	go-version-file: go.mod
	cache: true
	- name: Report Go cache status
	run: \|
	if [ "${{ steps.setup-go.outputs.cache-hit }}" == "true" ]; then
	echo "✅ Go cache hit" >> $GITHUB_STEP_SUMMARY
	else
	echo "⚠️ Go cache miss" >> $GITHUB_STEP_SUMMARY
	fi
	- name: npm ci
	run: npm ci
	working-directory: ./pkg/workflow/js
	- name: Build code
	run: make build

	- name: Rebuild lock files
	run: make recompile
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	js:
	needs: [lint]
	runs-on: ubuntu-latest
	permissions:
	contents: read
	concurrency:
	group: ci-${{ github.ref }}-js
	cancel-in-progress: true
	steps:
	- name: Checkout code
	uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
	- name: Set up Node.js
	id: setup-node
	uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6
	with:
	node-version: "24"
	cache: npm
	cache-dependency-path: pkg/workflow/js/package-lock.json
	- name: Report Node cache status
	run: \|
	if [ "${{ steps.setup-node.outputs.cache-hit }}" == "true" ]; then
	echo "✅ Node cache hit" >> $GITHUB_STEP_SUMMARY
	else
	echo "⚠️ Node cache miss" >> $GITHUB_STEP_SUMMARY
	fi
	- name: Install npm dependencies
	run: cd pkg/workflow/js && npm ci
	- name: Run tests
	run: cd pkg/workflow/js && npm test
	bench:
	needs: [test]
	runs-on: ubuntu-latest
	permissions:
	contents: read
	concurrency:
	group: ci-${{ github.ref }}-bench
	cancel-in-progress: true
	steps:
	- name: Checkout code
	uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5

	- name: Set up Go
	id: setup-go
	uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
	with:
	go-version-file: go.mod
	cache: true

	- name: Report Go cache status
	run: \|
	if [ "${{ steps.setup-go.outputs.cache-hit }}" == "true" ]; then
	echo "✅ Go cache hit" >> $GITHUB_STEP_SUMMARY
	else
	echo "⚠️ Go cache miss" >> $GITHUB_STEP_SUMMARY
	fi

	- name: Verify dependencies
	run: go mod verify

	- name: Run benchmarks
	run: make bench

	# Benchmark results for performance trend analysis - 14 days allows comparison across multiple runs
	- name: Save benchmark results
	uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
	with:
	name: benchmark-results
	path: bench_results.txt
	if-no-files-found: ignore
	retention-days: 14

	lint:
	runs-on: ubuntu-latest
	permissions:
	contents: read
	concurrency:
	group: ci-${{ github.ref }}-lint
	cancel-in-progress: true
	steps:
	- name: Checkout code
	uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5

	- name: Set up Node.js
	id: setup-node
	uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6
	with:
	node-version: "24"
	cache: npm
	cache-dependency-path: pkg/workflow/js/package-lock.json

	- name: Report Node cache status
	run: \|
	if [ "${{ steps.setup-node.outputs.cache-hit }}" == "true" ]; then
	echo "✅ Node cache hit" >> $GITHUB_STEP_SUMMARY
	else
	echo "⚠️ Node cache miss" >> $GITHUB_STEP_SUMMARY
	fi

	- name: Set up Go
	id: setup-go
	uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
	with:
	go-version-file: go.mod
	cache: true

	- name: Report Go cache status
	run: \|
	if [ "${{ steps.setup-go.outputs.cache-hit }}" == "true" ]; then
	echo "✅ Go cache hit" >> $GITHUB_STEP_SUMMARY
	else
	echo "⚠️ Go cache miss" >> $GITHUB_STEP_SUMMARY
	fi

	- name: Install dev dependencies
	run: make deps-dev

	- name: Run linter
	run: make lint

	- name: Lint error messages
	run: make lint-errors

	actions-build:
	needs: [lint]
	runs-on: ubuntu-latest
	permissions:
	contents: read
	concurrency:
	group: ci-${{ github.ref }}-actions-build
	cancel-in-progress: true
	steps:
	- name: Checkout code
	uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5

	- name: Set up Go
	id: setup-go
	uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
	with:
	go-version-file: go.mod
	cache: true

	- name: Report Go cache status
	run: \|
	if [ "${{ steps.setup-go.outputs.cache-hit }}" == "true" ]; then
	echo "✅ Go cache hit" >> $GITHUB_STEP_SUMMARY
	else
	echo "⚠️ Go cache miss" >> $GITHUB_STEP_SUMMARY
	fi

	- name: Verify dependencies
	run: go mod verify

	- name: Build actions
	run: make actions-build

	- name: Validate actions
	run: make actions-validate

	fuzz:
	needs: [test]
	runs-on: ubuntu-latest
	permissions:
	contents: read
	concurrency:
	group: ci-${{ github.ref }}-fuzz
	cancel-in-progress: true
	steps:
	- name: Checkout code
	uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5

	- name: Set up Go
	id: setup-go
	uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
	with:
	go-version-file: go.mod
	cache: true

	- name: Report Go cache status
	run: \|
	if [ "${{ steps.setup-go.outputs.cache-hit }}" == "true" ]; then
	echo "✅ Go cache hit" >> $GITHUB_STEP_SUMMARY
	else
	echo "⚠️ Go cache miss" >> $GITHUB_STEP_SUMMARY
	fi

	- name: Verify dependencies
	run: go mod verify

	- name: Run fuzz tests
	run: \|
	go test -fuzz=FuzzParseFrontmatter -fuzztime=10s ./pkg/parser/
	go test -fuzz=FuzzExpressionParser -fuzztime=10s ./pkg/workflow/

	security:
	needs: [test]
	runs-on: ubuntu-latest
	permissions:
	contents: read
	concurrency:
	group: ci-${{ github.ref }}-security
	cancel-in-progress: true
	steps:
	- name: Checkout code
	uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5

	- name: Set up Go
	id: setup-go
	uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
	with:
	go-version-file: go.mod
	cache: true

	- name: Report Go cache status
	run: \|
	if [ "${{ steps.setup-go.outputs.cache-hit }}" == "true" ]; then
	echo "✅ Go cache hit" >> $GITHUB_STEP_SUMMARY
	else
	echo "⚠️ Go cache miss" >> $GITHUB_STEP_SUMMARY
	fi

	- name: Verify dependencies
	run: go mod verify

	- name: Run security regression tests
	run: make test-security

	security-scan:
	needs: [test]
	runs-on: ubuntu-latest
	permissions:
	contents: read
	strategy:
	fail-fast: false
	matrix:
	tool:
	- name: zizmor
	flag: --zizmor
	- name: actionlint
	flag: --actionlint
	- name: poutine
	flag: --poutine
	concurrency:
	group: ci-${{ github.ref }}-security-scan-${{ matrix.tool.name }}
	cancel-in-progress: true
	name: "Security Scan: ${{ matrix.tool.name }}"
	steps:
	- name: Checkout code
	uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5

	- name: Set up Go
	id: setup-go
	uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
	with:
	go-version-file: go.mod
	cache: true

	- name: Report Go cache status
	run: \|
	if [ "${{ steps.setup-go.outputs.cache-hit }}" == "true" ]; then
	echo "✅ Go cache hit" >> $GITHUB_STEP_SUMMARY
	else
	echo "⚠️ Go cache miss" >> $GITHUB_STEP_SUMMARY
	fi

	- name: Build gh-aw
	run: make build

	- name: Run ${{ matrix.tool.name }} security scan on poem workflow
	run: ./gh-aw compile poem-bot ${{ matrix.tool.flag }}

	logs-token-check:
	needs: [test]
	runs-on: ubuntu-latest
	permissions:
	contents: read
	concurrency:
	group: ci-${{ github.ref }}-logs-token-check
	cancel-in-progress: true
	steps:
	- name: Checkout code
	uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5

	- name: Set up Go
	id: setup-go
	uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
	with:
	go-version-file: go.mod
	cache: true

	- name: Report Go cache status
	run: \|
	if [ "${{ steps.setup-go.outputs.cache-hit }}" == "true" ]; then
	echo "✅ Go cache hit" >> $GITHUB_STEP_SUMMARY
	else
	echo "⚠️ Go cache miss" >> $GITHUB_STEP_SUMMARY
	fi

	- name: Build gh-aw
	run: make build

	- name: Run logs command with JSON output
	id: logs_check
	run: \|
	# Run the logs command and capture output
	./gh-aw logs -c 2 --engine copilot --json > logs_output.json 2>&1 \|\| true

	# Display the output for debugging
	echo "Logs command output:"
	cat logs_output.json

	# Check if token count is found in the JSON output
	if jq -e '.summary.total_tokens' logs_output.json > /dev/null 2>&1; then
	TOKEN_COUNT=$(jq '.summary.total_tokens' logs_output.json)
	echo "✅ Token count found: $TOKEN_COUNT" >> $GITHUB_STEP_SUMMARY
	echo "token_count=$TOKEN_COUNT" >> $GITHUB_OUTPUT
	exit 0
	else
	echo "❌ Token count not found in JSON output" >> $GITHUB_STEP_SUMMARY
	exit 1
	fi
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Split update-project into create-project and update-project safe outputs #23552

Workflow file

Split update-project into create-project and update-project safe outputs #23552

Uh oh!

Workflow file for this run