embeddevio/awg-dash
1
0
Fork 0
Code Issues 40 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

ci: тесты требуют requirements-contract.txt; явный guard на отсутствие deploy/Dockerfile
ci / lint (push) Successful in 42s
Details
contract-openapi / openapi-contract (push) Failing after 41s
Details
contract-openapi / ts-client-is-current (push) Failing after 31s
Details
ci / unit (push) Successful in 41s
Details
ci / security (push) Successful in 1m19s
Details
ci / build (push) Has been skipped
Details
ci / image-scan (push) Has been skipped
Details
ci / push (push) Has been skipped
Details

Browse Source 
Refs #17
This commit is contained in:
embeddevio
2026-10-28 22:01:14 +03:00
parent b13f5e8ac5
commit a941525f2e
1 changed files with 13 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci.yml
+13 -5
View File
@@ -53,7 +53,7 @@ jobs:
- name: install dependencies - name: install dependencies
run: | run: |
python -m pip install --upgrade pip python -m pip install --upgrade pip
pip install -r requirements-dev.txt pip install -r requirements-dev.txt -r requirements-contract.txt
- name: ruff check - name: ruff check
run: ruff check backend run: ruff check backend
@@ -101,7 +101,7 @@ jobs:
- name: install dependencies - name: install dependencies
run: | run: |
python -m pip install --upgrade pip python -m pip install --upgrade pip
pip install -r requirements-dev.txt pip install -r requirements-dev.txt -r requirements-contract.txt
- name: "pytest + coverage gate (fail below 70%)" - name: "pytest + coverage gate (fail below 70%)"
run: | run: |
@@ -153,7 +153,7 @@ jobs:
run: | run: |
python -m pip install --upgrade pip python -m pip install --upgrade pip
pip install "bandit[toml]>=1.7" "pip-audit>=2.7" pip install "bandit[toml]>=1.7" "pip-audit>=2.7"
pip install -r requirements.txt pip install -r requirements.txt -r requirements-contract.txt
- name: "bandit -lll (HIGH severity gate)" - name: "bandit -lll (HIGH severity gate)"
run: | run: |
@@ -164,11 +164,11 @@ jobs:
- name: "pip-audit (known vulnerabilities gate)" - name: "pip-audit (known vulnerabilities gate)"
run: | run: |
pip-audit -r requirements.txt --progress-spinner off pip-audit -r requirements.txt -r requirements-contract.txt --progress-spinner off
- name: pip-audit json report - name: pip-audit json report
if: always() if: always()
run: pip-audit -r requirements.txt --progress-spinner off --format json -o pip-audit-report.json || true run: pip-audit -r requirements.txt -r requirements-contract.txt --progress-spinner off --format json -o pip-audit-report.json || true
- name: upload security artifacts - name: upload security artifacts
if: always() if: always()
@@ -200,6 +200,14 @@ jobs:
curl -fsSL -o /tmp/src.tar.gz "http://192.168.1.111:3000/${IMAGE_NAME}/archive/${GITHUB_SHA}.tar.gz" curl -fsSL -o /tmp/src.tar.gz "http://192.168.1.111:3000/${IMAGE_NAME}/archive/${GITHUB_SHA}.tar.gz"
tar -xzf /tmp/src.tar.gz --strip-components=1 -C . tar -xzf /tmp/src.tar.gz --strip-components=1 -C .
- name: "guard: deploy/Dockerfile"
run: |
if [ ! -f deploy/Dockerfile ]; then
echo "::error::deploy/Dockerfile отсутствует: сборка образа ждёт merge #18 (PR #49)."
echo "Пайплайн целиком проверен на ветке feat/17-verify (она же + deploy/Dockerfile)."
exit 1
fi
- name: image meta - name: image meta
id: meta id: meta
run: | run: |