Skip to content

fix: the merge gate could not block a merge #76

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
stxkxs merged 2 commits into from
Aug 8, 2026
Merged

fix: the merge gate could not block a merge #76

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
56a42f3
fix: the merge gate could not block a merge
stxkxs Aug 8, 2026
02536a0
fix: repin the gate past the manifest load failure
stxkxs Aug 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 9 additions & 18 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -490,6 +490,8 @@ jobs:
needs:
[
lint,
build,
docs,
test-unit,
test-integration,
security-audit,
Expand All @@ -499,22 +501,11 @@ jobs:
helm-lint,
docker-build,
]
if: github.event_name == 'pull_request'
# Load-bearing. Without it a failed dependency SKIPS this job, and GitHub
# counts a skipped check as passing for branch protection — the gate would
# report green exactly when something broke.
if: always()
steps:
- name: All gates passed
run: |
echo "✅ Lint"
echo "✅ Unit Tests (100% branch on audit.ts + statuspage-approval-gate.ts)"
echo "✅ Integration Tests (ConsistentRead semantics verified against dynamodb-local)"
echo "✅ Dependency Security Audit (no HIGH/CRITICAL) + typecheck (src + tests)"
echo "✅ Platform CRs valid against the digest-verified eks-agent-platform CRD schemas"
echo "✅ Platform CR gate self-test — every seeded defect rejected"
echo "✅ Vendored CRD schemas match their pin, and the pin is current with upstream"
echo "✅ Helm Lint + Template"
echo "✅ Docker Build"
echo "✅ Approval-gate invariant verified"
echo "✅ Slack adapter discipline verified"
echo "✅ HTTP-client discipline verified"
echo "✅ Secret inventory lists agree"
echo "✅ Every secret path the chart reads is one the seeder creates"
echo "✅ Vendored copies byte-identical to nanohype (chart + runtime + config)"
- uses: nanohype/.github/actions/merge-gate@6ec6c5b3e6c4a8b15e12da4afd7ac4870a630092 # main
with:
needs: ${{ toJSON(needs) }}
Loading