fix: harden ci and sync workflow #69
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| branches: [main] | |
| paths: | |
| - ".github/workflows/ci.yml" | |
| - ".github/scripts/**" | |
| - ".gitignore" | |
| - "README.md" | |
| - "CITATION.cff" | |
| - "SECURITY.md" | |
| - "references/**" | |
| - "scripts/**" | |
| - "skills/**" | |
| pull_request: | |
| branches: [main] | |
| paths: | |
| - ".github/workflows/ci.yml" | |
| - ".github/scripts/**" | |
| - ".gitignore" | |
| - "README.md" | |
| - "CITATION.cff" | |
| - "SECURITY.md" | |
| - "references/**" | |
| - "scripts/**" | |
| - "skills/**" | |
| schedule: | |
| - cron: "0 9 * * 1" | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| jobs: | |
| validate: | |
| name: Validate skill source | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| matrix: | |
| os: [ubuntu-latest, macos-latest] | |
| python-version: ["3.10", "3.14"] | |
| steps: | |
| - name: Check out repository | |
| uses: actions/checkout@v5 | |
| - name: Set up Python | |
| uses: actions/setup-python@v6 | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| - name: Install validation dependencies | |
| run: | | |
| python -m pip install --upgrade pip | |
| python -m pip install ruff==0.12.4 | |
| - name: Check cross-agent portability | |
| run: python3 .github/scripts/check-portability.py | |
| - name: Validate CI policy | |
| run: python3 scripts/validate-ci.py | |
| - name: Run skill source checks | |
| run: python3 scripts/validate.py | |
| - name: Test payload sync behavior | |
| run: python3 scripts/test-sync-payload.py | |
| - name: Payload sync check | |
| run: bash scripts/sync-payload.sh --ci | |
| - name: Ruff check scripts | |
| run: python3 -m ruff check scripts .github/scripts | |
| verify-urls: | |
| name: Verify external references | |
| if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Check out repository | |
| uses: actions/checkout@v5 | |
| - name: Verify referenced URLs | |
| run: python3 scripts/verify-urls.py |