kevinveenbirkenbach/computer-playbook
1
0 Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-13 22:26:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,353 Commits 23 Branches 79 Tags
46baaacba9aa012b9fb0a2dea9eb615af435081e
Commit Graph
71 Commits
Author SHA1 Message Date
kevinveenbirkenbach f28e173d23 fix(ci): restore CI push trigger for normal branch commits 
- Explicitly trigger CI (push) on all branches
- Continue to ignore version, stable and other release tags
- Prevent missing CI runs on regular commits while avoiding tag-based duplicates

https://chatgpt.com/share/6948fa05-1970-800f-a010-59c8c3588713
 2025-12-22 09:55:40 +01:00
kevinveenbirkenbach c82d1f6ca3 fix(ci): eliminate duplicate workflow runs by separating branch and tag triggers 
- Run CI (push) only on branch pushes and ignore version/stable/latest tags
- Run versioning workflow exclusively on v* tag pushes
- Remove overlapping branch triggers to prevent double executions

https://chatgpt.com/share/6948fa05-1970-800f-a010-59c8c3588713
 2025-12-22 09:53:23 +01:00
kevinveenbirkenbach fc7ba32db0 fix(ci): prevent duplicate runs by ignoring tag pushes in CI (push) 
Limit CI (push) to main/master branches and ignore version and stable tags
to avoid duplicate workflow executions.

https://chatgpt.com/share/694905df-e06c-800f-8876-9f6682e22943
 2025-12-22 09:48:25 +01:00
kevinveenbirkenbach 2cf4d880ae Optimized deploy run names 2025-12-21 12:34:46 +01:00
kevinveenbirkenbach cc9c2dceb8 fix(ci,nix): forward NIX_CONFIG into docker build and runtime to avoid GitHub rate limits 
- Export NIX_CONFIG in CI jobs and Makefile
- Pass NIX_CONFIG as docker build-arg
- Use NIX_CONFIG only in relevant Dockerfile RUN steps (no secret persistence)
- Forward NIX_CONFIG to test and deploy containers

https://chatgpt.com/share/6947c681-abc8-800f-ba12-de2ff3a7abad
 2025-12-21 11:05:31 +01:00
kevinveenbirkenbach 2cb7bab23a ci(hadolint): upload SARIF before failing on findings 
https://chatgpt.com/share/69456f33-94f0-800f-9559-62959b75144e
 2025-12-19 16:29:13 +01:00
kevinveenbirkenbach f775ae9dfa ci(deploy): run deploy tests with --missing and docker-based invokable excludes 2025-12-19 16:07:59 +01:00
kevinveenbirkenbach 0df20ab304 Set correct Variable 2025-12-19 15:26:34 +01:00
kevinveenbirkenbach 7b2c0df237 Made deploy.sh executable 2025-12-19 09:01:15 +01:00
kevinveenbirkenbach 7c0c1321d5 Fix Hadolint code scanning identity and apply formatting cleanups 
https://chatgpt.com/share/694420ac-5d70-800f-94b8-71549893936e
 2025-12-18 16:41:25 +01:00
kevinveenbirkenbach 65ae22bc97 ci(lint-docker): assert SARIF generation and print Hadolint findings 
https://chatgpt.com/share/694401cd-2f14-800f-8c55-b2051aaa39fd
 2025-12-18 14:29:44 +01:00
kevinveenbirkenbach dccfcb42e0 ci: pin docker buildx and login actions to immutable SHAs 
https://chatgpt.com/share/6943f7e6-858c-800f-94f1-06aa106bb8c1
 2025-12-18 13:47:09 +01:00
kevinveenbirkenbach 89294d15db Changed job name 2025-12-18 10:01:37 +01:00
kevinveenbirkenbach eee65b6c5d fix(ci): repair reusable workflow by renaming aggregator job 
https://chatgpt.com/share/6943c243-33dc-800f-ab7c-794efbc5e4b3
 2025-12-18 09:58:29 +01:00
kevinveenbirkenbach f0d5ea62c6 ci: fix CodeQL reusable workflow permissions 
https://chatgpt.com/share/6943c0d7-5360-800f-9433-c348d5e5941f
 2025-12-18 09:52:35 +01:00
kevinveenbirkenbach 653d56b4a4 fix(ci): allow SARIF uploads in reusable workflows 
Grant security-events: write to CI callers and code-analyses, and drop unnecessary actions permission from Docker lint job to fix reusable workflow permission errors.

https://chatgpt.com/share/6943c031-bc04-800f-ae09-4ac1f9ff48c9
 2025-12-18 09:49:48 +01:00
kevinveenbirkenbach 9ad107f628 ci: align workflow permissions with reusable code-analyses workflow 
Grant packages:read to all CI caller workflows to satisfy permissions
required by the reusable code-analyses workflow and avoid permission
mismatch errors.

https://chatgpt.com/share/6943becc-3148-800f-85e4-8ca917c8bb94
 2025-12-18 09:43:52 +01:00
kevinveenbirkenbach d28e63bdf0 chore(ci): set explicit workflow permissions for GITHUB_TOKEN 
https://chatgpt.com/share/6943bd97-5324-800f-94e2-68d25a45d03a
 2025-12-18 09:39:07 +01:00
kevinveenbirkenbach 9b334edd9e Merge pull request #8 from kevinveenbirkenbach/dependabot/github_actions/actions/setup-python-6 
Bump actions/setup-python from 5 to 6
 2025-12-18 09:31:34 +01:00
kevinveenbirkenbach c1570748a8 Merge pull request #9 from kevinveenbirkenbach/dependabot/github_actions/github/codeql-action-4 
Bump github/codeql-action from 3 to 4
 2025-12-18 09:31:03 +01:00
kevinveenbirkenbach af032d1801 ci: introduce reusable code-analyses pipeline and orchestrators 
- Add reusable code-analyses workflow (workflow_call + dispatch)
- Split CI triggers into push, PR, schedule, and version orchestrators
- Remove duplicate triggers from reusable workflows
- Rename and align workflows for clearer CI structure

https://chatgpt.com/share/6943b12d-2c84-800f-b63d-68e4d1db6d0a
 2025-12-18 09:30:28 +01:00
dependabot[bot] 72fbc77597 Bump actions/setup-python from 5 to 6 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-18 08:02:50 +00:00
dependabot[bot] 6c42228b03 Bump github/codeql-action from 3 to 4 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-18 08:02:34 +00:00
kevinveenbirkenbach 3df8c96b84 Merge pull request #7 from kevinveenbirkenbach/dependabot/github_actions/hadolint/hadolint-action-3.3.0 
Bump hadolint/hadolint-action from 2.1.0 to 3.3.0
 2025-12-18 09:02:17 +01:00
kevinveenbirkenbach 7de0a16609 Merge pull request #6 from kevinveenbirkenbach/dependabot/github_actions/actions/checkout-6 
Bump actions/checkout from 4 to 6
 2025-12-18 09:01:26 +01:00
kevinveenbirkenbach c11600d0ea ci: tighten hadolint and codeql security checks 
- Fail Hadolint on warnings and errors
- Enable extended and security-and-quality CodeQL queries

https://chatgpt.com/share/6943b12d-2c84-800f-b63d-68e4d1db6d0a
 2025-12-18 08:52:00 +01:00
dependabot[bot] 46a0ce3fe0 Bump actions/checkout from 4 to 6 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-18 07:47:19 +00:00
dependabot[bot] 7ddf99b6ac Bump hadolint/hadolint-action from 2.1.0 to 3.3.0 
Bumps [hadolint/hadolint-action](https://github.com/hadolint/hadolint-action) from 2.1.0 to 3.3.0.
- [Release notes](https://github.com/hadolint/hadolint-action/releases)
- [Commits](https://github.com/hadolint/hadolint-action/compare/f988afea3da57ee48710a9795b6bb677cc901183...2332a7b74a6de0dda2e2221d575162eba76ba5e5)

---
updated-dependencies:
- dependency-name: hadolint/hadolint-action
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-12-18 07:47:07 +00:00
kevinveenbirkenbach d8fd8448d4 ci: centralize lint and security workflows via workflow_call 
- Convert Hadolint and CodeQL workflows to reusable workflow_call
- Keep scheduled scans for Dockerfile hygiene and security analysis
- Integrate lint-docker and security-codeql into mark-stable gate
- Rename workflows for consistent lint/security naming

https://chatgpt.com/share/6943b12d-2c84-800f-b63d-68e4d1db6d0a
 2025-12-18 08:45:38 +01:00
kevinveenbirkenbach 558be6fd4a Add CodeQL analysis workflow configuration 2025-12-18 03:43:56 +01:00
kevinveenbirkenbach 8b887e47e9 Add Hadolint workflow for Dockerfile linting 
This workflow runs Hadolint to analyze Dockerfiles and uploads results.
 2025-12-18 03:38:13 +01:00
kevinveenbirkenbach be22f8ec1f Required to change back to /opt/venvs/ due to runner and root executing infinito 2025-12-18 01:47:31 +01:00
kevinveenbirkenbach 6f5cc2302f Added missing source 2025-12-18 00:55:03 +01:00
kevinveenbirkenbach c28468eb3c Activate venv after pkgmgr setup 2025-12-18 00:50:13 +01:00
kevinveenbirkenbach 2cf7e6c81d Changed venv path 2025-12-18 00:47:34 +01:00
kevinveenbirkenbach 7bc5ba4ff7 Activated venv for pkgmgr 2025-12-17 23:47:40 +01:00
kevinveenbirkenbach d0c9e97907 Added missing shallow 2025-12-17 23:20:37 +01:00
kevinveenbirkenbach d60130376d Set 'pkgmgr install infinito --clone-mode --no-verification' for install test. 2025-12-17 23:03:02 +01:00
kevinveenbirkenbach efdb099479 ci(test-install-make): activate Infinito.Nexus venv before invoking CLI 
Ensure the Infinito.Nexus virtual environment is activated inside the
pkgmgr virgin container so the `infinito` console script is available
on PATH during test execution.

This validates the editable install and CLI entry point without relying
on pkgmgr internals.

https://chatgpt.com/share/6942df9e-6af0-800f-aeec-324418740cbb
 2025-12-17 17:51:35 +01:00
kevinveenbirkenbach 18ab76278c Added correct image for pkgmgr 2025-12-17 17:32:10 +01:00
kevinveenbirkenbach 46ac48598f ci: consolidate install tests and fix pkgmgr/make workflows 
- Replace legacy nix/virgin install jobs with make- and pkgmgr-based install tests
- Add distro matrix install test using pkgmgr virgin containers
- Ensure deterministic working directories via explicit Docker mounts and -w
- Register infinito CLI entrypoint by packaging main.py explicitly
- Simplify mark-stable gate to reflect new install strategy

https://chatgpt.com/share/6942da66-ceb0-800f-8ebe-444e5b638f25
 2025-12-17 17:29:06 +01:00
kevinveenbirkenbach 82f3166ca9 Added lint for ansible and fixed integration test implementation 2025-12-17 12:53:49 +01:00
kevinveenbirkenbach b94c0fc050 Optimized workflow calls 2025-12-17 12:27:39 +01:00
kevinveenbirkenbach 8dd4d6f42d Implemented calling on workflow 2025-12-17 12:25:25 +01:00
kevinveenbirkenbach d165ed27bc Optimized tests 2025-12-17 12:22:36 +01:00
kevinveenbirkenbach c94cc2d676 Implemented static code testing 2025-12-17 12:12:22 +01:00
kevinveenbirkenbach 75ee4c737d Optimized linter 2025-12-17 09:24:30 +01:00
kevinveenbirkenbach b5749415d1 Added ruff linter 2025-12-16 22:24:57 +01:00
kevinveenbirkenbach 0d18d86243 Add --vars support to inventory creation, implement deep JSON overrides for host_vars, and update CI workflow to pass MASK_CREDENTIALS_IN_LOGS=false. 
Includes:
- New apply_vars_overrides() with deep merge logic
- New --vars CLI argument in cli/create/inventory.py
- Added unit tests for vars handling in test_inventory.py
- Updated test-deploy workflow to pass --vars in all deploy phases

Ref: ChatGPT conversation https://chatgpt.com/share/69320f49-6c00-800f-8875-49d36935ae3a
 2025-12-04 23:48:43 +01:00
kevinveenbirkenbach bf0134b9c5 Extend inventory creation with --authorized-keys support, unify PATH_ADMINISTRATOR_HOME resolution via group_vars, update CI workflow to pass dummy SSH key, and add full unit test coverage for new features. 
See details: https://chatgpt.com/share/6931f775-12d4-800f-9ccb-e6ce52097f9c
 2025-12-04 22:06:10 +01:00