nnaannooandKristian Myram 4d1066685f Add git-sources.yml: the shared "Git dependencies come from storytold" check (#147) ...

Eight apps paste the same 25-line job into ci.yml, nix.yml or release.yml (ten
copies): Cargo.lock exists and is up to date, no .cargo/config(.toml)
replaces, patches or overrides a source, and every git dependency comes from
github.com/storytold. Apps' workflows are meant to only call workflows here.

actions/check-git-sources holds the check as a tested script, and
git-sources.yml runs it on a credential-less checkout, so an app swaps its
job for one `uses:` line and keeps `needs: git-sources`. It reports every
problem rather than the first, as GitHub error annotations, and treats
unreadable TOML as a failure. On all 18 apps' current Cargo.lock and Cargo
config it agrees with the inline copy.

Co-authored-by: Kristian Myram <kmy@oresundsbron.com>

2026-11-05 09:13:01 -05:00

..

ast-grep

ast-grep: a reusable structural-lint workflow driven by the app's sgconfig.yml (#80)

2026-10-24 19:29:21 -04:00

test_arch.py

Merge pull request #97 from g1obalworlds/fix/arch-prerelease-version

2026-11-02 22:29:08 -05:00

test_ast_grep.py

fix(ast-grep): end option parsing before the scanned paths

2026-11-02 22:17:40 -05:00

test_changed_paths.py

Add changed-paths.yml: run a job only when its paths change or a label asks (#142)

2026-11-05 11:12:34 +01:00

test_check_git_sources.py

Add git-sources.yml: the shared "Git dependencies come from storytold" check (#147)

2026-11-05 09:13:01 -05:00

test_contributor_generator.py

Build model titles only from each provider's known words

2026-11-04 13:49:44 +01:00

test_contributor_refresh.py

Merge main and resolve workflow test trigger conflicts

2026-11-03 12:30:26 +00:00

test_craft_fonts.py

Shared quality-gate workflow for the craft apps (gate.yml) (#69)

2026-10-23 12:15:49 -04:00

test_craft_i18n.py

fix(release): drop the i18n gate; missing translations never block (storytold/craft-i18n#20) (#79)

2026-10-23 17:06:45 -04:00

test_freebsd_cache.py

fix(freebsd-cache): fall back to a compatible cache when manifests move (#41)

2026-10-22 15:00:48 -04:00

test_freebsd_release.py

ci(release): cross-compile FreeBSD aarch64 in the x86_64 VM (#50)

2026-10-22 14:58:24 -04:00

test_freebsd.py

Build FreeBSD aarch64 release archives by default (#104)

2026-10-28 15:49:07 -04:00

test_gate.py

gate.yml: optional gate-timeout-minutes stops a hung gate with a process list and a clear error (#143)

2026-11-05 11:27:56 +01:00

test_import_macos_certificate.py

Add import-macos-certificate: the shared macOS signing certificate import (#140)

2026-11-05 09:08:39 -05:00

test_install_apt_packages.py

Harden contributor consent identities and preference preflight

2026-11-03 12:53:38 +00:00

test_linux_glibc.py

fix(release): give riscv64 packages the glibc floor of their runner (#62)

2026-10-22 17:10:08 -04:00

test_nextest_versions.py

test: cover nextest installer aliases

2026-10-26 16:20:05 -06:00

test_nix.py

security(nix): prevent shell injection through extra-args (#52)

2026-10-22 14:37:49 -04:00

test_python_coverage.py

Provision fonts and optional Python coverage for Sonar (#88)

2026-10-25 23:37:12 -04:00

test_release_flatpak_oci.py

Push the Flatpak OCI tags in the release workflow, not the app's script (#146)

2026-11-05 09:12:05 -05:00

test_release_inputs.py

security(release): prevent app-name shell injection in FreeBSD and server jobs (#55)

2026-10-22 14:47:14 -04:00

test_resolve_version.py

test(resolve-version): add test for CRLF sanitization in app-title

2026-10-24 22:46:59 -04:00

test_scaffold_flatpak_oci.py

Keep development builds off stable OCI tags

2026-11-03 00:01:47 -05:00

test_setup_windows_signing.py

Add setup-windows-signing: the shared Authenticode signing script (#144)

2026-11-05 09:10:10 -05:00

test_sign_linux.py

Test release signing branch and rollout gates

2026-11-03 00:01:15 -05:00

test_sonarcloud.py

Match the SonarCloud token fallback the scan actually uses (#139)

2026-11-04 17:59:19 -05:00

test_supply_chain.py

supply-chain: name the repository for the SBOM upload

2026-10-26 17:00:22 -07:00

test_unit_test_triggers.py

ci: honor negated path patterns in the trigger test

2026-10-26 17:47:48 -07:00

test_windows_arm64.py

ci(windows-arm64): only main saves the packaging cache (#116)

2026-11-01 01:39:08 +01:00

test_windows_install_contract.py

fix(ci): separate ARM64 install paths and scope (#100)

2026-10-27 15:45:39 -04:00