Skip to content

Cycle 018: Supabase provision/apply/verify GHA + operator runner#4

Open
junhengz wants to merge 20 commits intonicepkg:mainfrom
junhengz:cycle-018-supabase-gha-ops
Open

Cycle 018: Supabase provision/apply/verify GHA + operator runner#4
junhengz wants to merge 20 commits intonicepkg:mainfrom
junhengz:cycle-018-supabase-gha-ops

Conversation

@junhengz
Copy link

Adds CI workflows and scripts to provision (or reuse) a Supabase project via the Supabase Mgmt API, deterministically build DB URL, apply the shipped SQL bundle, and emit a non-secret verification artifact (supabase-verify.json).\n\nKey files:\n- .github/workflows/cycle-005-supabase-provision-apply-verify.yml\n- .github/workflows/cycle-005-supabase-apply.yml (apply-bundle + upload verify artifact)\n- projects/security-questionnaire-autopilot/scripts/{supabase-mgmt-provision-project.sh,supabase-build-db-url.sh,apply-supabase-bundle.sh,verify-supabase-bundle-applied.mjs}\n- scripts/devops/run-cycle-005-supabase-provision-apply-verify.sh (gh-based set secrets optional + dispatch + download evidence)\n- docs/devops/cycle-018-supabase-gha-secrets-and-dispatch.md\n\nTo run after merge: set GitHub Actions secrets SUPABASE_ACCESS_TOKEN, SUPABASE_ORG_SLUG, SUPABASE_DB_PASSWORD; then dispatch cycle-005-supabase-provision-apply-verify.

Add GitHub Actions workflows and supporting scripts/runbooks to sync NEXT_PUBLIC_SUPABASE_URL + SUPABASE_SERVICE_ROLE_KEY into hosted runtime (Vercel/Cloudflare Pages), trigger redeploy, then run Cycle 005 hosted persistence evidence collection.
- Make manual dispatch default to preflight-only (safer), add schedule gate + candidate persistence
- Improve env-health deploy metadata for BASE_URL/debug
- Expand operator wrapper script + update runbooks/checklists/acceptance docs
- Cloudflare Pages: include deployments + aliases; add branch alias heuristic\n- Vercel: include production+preview and fetch deployment aliases\n- Docs: maintainer one-shot + QA preflight + CTO/DevOps unblock
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant