Files
molecule-core/.gitea/workflows/lint-staging-tenant-cd-gate-chain.yml
T
hongming-ceo-delegated 962b18deb9
Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 6s
CI / Python Lint & Test (pull_request) Successful in 7s
Block integration-tester contamination artifacts / Block staging-trigger / invalid manifest contamination (pull_request) Successful in 7s
E2E Staging SaaS (full lifecycle) / E2E Staging SaaS (pull_request) Has been skipped
E2E Staging SaaS (full lifecycle) / E2E Staging Platform Boot (pull_request) Has been skipped
E2E Staging SaaS (full lifecycle) / E2E Staging Concierge user_tasks (pull_request) Has been skipped
E2E Staging SaaS (full lifecycle) / E2E Staging Workspace Requests (core#2606) (pull_request) Has been skipped
E2E Staging SaaS (full lifecycle) / E2E Staging Concierge Platform Agent (pull_request) Has been skipped
E2E Staging SaaS (full lifecycle) / E2E Staging Plugin Install Lifecycle (pull_request) Has been skipped
E2E Peer Visibility (literal MCP list_peers) / detect-changes (pull_request) Successful in 8s
Handlers Postgres Integration / detect-changes (pull_request) Successful in 9s
E2E Chat / detect-changes (pull_request) Successful in 21s
sop-checklist / all-items-acked (pull_request) ack advisory until agent-team — would be failure: acked: 0/10 — missing: comprehensive-testing, local-postgres-e2e, staging-smoke, +7 — body
sop-checklist / na-declarations (pull_request) N/A: (none)
Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 11s
CI / Detect changes (pull_request) Successful in 30s
sop-checklist / all-items-acked (pull_request_target) Successful in 4s
E2E API Smoke Test / detect-changes (pull_request) Successful in 31s
Lint forbidden tenant-env keys / Scan workspace_secrets writers for forbidden env keys (pull_request) Successful in 9s
Lint forbidden tenant-env keys / Scan for repo-host token write into tenant workspace surface (pull_request) Successful in 7s
E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 30s
lint-bp-context-emit-match / lint-bp-context-emit-match (pull_request) Successful in 25s
Lint forbidden hand-written mcp__ tool-id literals / Scan for hand-written mcp__ tool-id literals (pull_request) Successful in 8s
Concierge Creates Workspace Hermetic / Concierge Creates Workspace Hermetic (pull_request) Successful in 39s
lint-required-workflows-docker-host-pinned / Lint docker-host pin on docker-touching workflows (pull_request) Successful in 12s
lint-continue-on-error-tracking / lint-continue-on-error-tracking (pull_request) Successful in 31s
lint-no-coe-on-required / lint-no-coe-on-required (pull_request) Successful in 21s
lint-phantom-gate / lint-phantom-gate (pull_request) Successful in 21s
Lint publish-runner timeout-minutes / Lint publish-runner timeout-minutes (pull_request) Successful in 21s
lint-env-coupling-dismissal / lint-env-coupling-dismissal (pull_request) Successful in 31s
lint-required-no-paths / lint-required-no-paths (pull_request) Successful in 20s
Lint schedule budget / Zero-cron ratchet (pull_request) Successful in 20s
Lint pre-flip continue-on-error / Verify continue-on-error flips have run-log proof (pull_request) Successful in 26s
lint-setup-go-cache / lint-setup-go-cache (pull_request) Successful in 22s
lint-required-context-exists-in-bp / lint-required-context-exists-in-bp (pull_request) Successful in 29s
Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 9s
lint-staging-tenant-cd-gate-chain / lint-staging-tenant-cd-gate-chain (pull_request) Successful in 15s
Lint workflow YAML (Gitea-1.22.6-hostile shapes) / Lint workflow YAML for Gitea-1.22.6-hostile shapes (pull_request) Successful in 19s
E2E Peer Visibility (literal MCP list_peers) / E2E Peer Visibility (pull_request) Successful in 8s
Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 4s
sop-checklist / review-refire (pull_request_target) Successful in 3s
E2E Chat / E2E Chat (pull_request) Successful in 5s
CI / Canvas (Next.js) (pull_request) Successful in 4s
CI / Platform (Go) (pull_request) Successful in 4s
E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 4s
CI / Canvas Deploy Status (pull_request) Successful in 3s
E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 5s
PR Diff Guard / PR diff guard (pull_request) Successful in 28s
template-delivery-e2e / detect-changes (pull_request) Successful in 26s
template-delivery-e2e / Template-asset delivery (fresh seo-agent — config+prompts via asset channel, seo-all via plugin reconcile) (pull_request) Successful in 3s
Local Provision Lifecycle E2E / Local Provision Lifecycle E2E (stub) (pull_request) Successful in 36s
Ops Scripts Tests / Ops scripts (unittest) (pull_request) Successful in 32s
Local Provision Lifecycle E2E / Local Provision Lifecycle E2E (real image + MiniMax LLM, advisory) (pull_request) Successful in 35s
CI / Shellcheck (E2E scripts) (pull_request) Successful in 5m45s
CI / all-required (pull_request) Successful in 4s
reserved-path-review / reserved-path-review (pull_request_target) Approved via pull_request_review trigger
qa-review / approved (pull_request_target) Approved via pull_request_review trigger
security-review / approved (pull_request_target) Approved via pull_request_review trigger
reserved-path-review / reserved-path-review (pull_request_review) Successful in 8s
qa-review / approved (pull_request_review) Successful in 10s
security-review / approved (pull_request_review) Successful in 8s
gitea-merge-queue / queue (pull_request_review) Successful in 48s
gate-check-v3 / gate-check (pull_request_target) Successful in 9s
ci-required-drift / drift (pull_request) Waiting to run
E2E Staging SaaS (full lifecycle) / pr-validate (pull_request) Waiting to run
E2E Staging SaaS (full lifecycle) / Prune stale e2e DNS records (pull_request) Waiting to run
E2E Staging SaaS (full lifecycle) / E2E Staging Concierge Creates Workspace (pull_request) Waiting to run
E2E Staging SaaS (full lifecycle) / E2E Staging Concierge (compile+skip) (pull_request) Waiting to run
fix(ci): remove railway from staging tenant cd
2026-07-09 02:09:54 -07:00

49 lines
1.7 KiB
YAML

name: lint-staging-tenant-cd-gate-chain
# Static gate-shape lint for the gated staging tenant CD pipeline. Reuses the
# same behavior-based (needs-graph) approach as the control-plane's
# lint_deploy_gate_chain.py, encoding the tenant CD contract:
#
# - advance-pin needs (transitively) await-image
# - redeploy-fleet needs (transitively) advance-pin
# - e2e-smoke needs (transitively) redeploy-fleet
# - no continue-on-error on any gating job or step
# - no provider-specific CP deploy/reload adapter in tenant-image CI
#
# A future edit that drops the redeploy-fleet -> e2e-smoke path, masks a gate
# failure with continue-on-error, or reintroduces Railway/other provider-specific
# CP deploy wiring into this tenant-image workflow FAILS this lint.
#
# No paths: filter — a genuine gate, runs on every PR (merge-blocking via
# ci / all-required).
on:
pull_request:
types: [opened, synchronize, reopened]
push:
branches: [main, staging]
permissions:
contents: read
concurrency:
group: lint-staging-tenant-cd-gate-chain-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
jobs:
lint:
name: lint-staging-tenant-cd-gate-chain
runs-on: ubuntu-latest
timeout-minutes: 5
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
fetch-depth: 1
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
with:
python-version: '3.12'
- name: Install PyYAML
run: python -m pip install --quiet 'PyYAML==6.0.2'
- name: Lint staging tenant CD gate chain
run: python3 .gitea/scripts/lint_staging_tenant_cd_gate_chain.py