summaryrefslogtreecommitdiff
path: root/.github
diff options
context:
space:
mode:
authorYuriy Andamasov <yuriy@vyos.io>2026-08-12 21:22:12 +0300
committerYuriy Andamasov <yuriy@vyos.io>2026-08-12 21:22:12 +0300
commitdf84388ab71239e392837a548a3e1c4d54c4c5de (patch)
treecd76aca9497b744376384d819a9eb87133c19f09 /.github
parente696fc296fb70c8e5db008b672905c745d7c09c9 (diff)
downloadcodecov-df84388ab71239e392837a548a3e1c4d54c4c5de.tar.gz
codecov-df84388ab71239e392837a548a3e1c4d54c4c5de.zip
seed: initial Codecov Global YAML + plumbing
Bootstrap content for the vyos org Codecov Global YAML mirror. codecov.yml is the comment-free dashboard-paste payload (Codecov strips comments on save); validate.yml gates all PRs against https://codecov.io/validate. AGENTS.md + README.md document the dashboard-paste protocol and language-applicability caveats. Companion repo: VyOS-Networks/codecov (filed Wave 2, ~1 week soak). Spec: [VYOS/894337074](https://vyos.atlassian.net/wiki/spaces/VYOS/pages/894337074) Phorge: T9078 IS: IS-609 🤖 Generated by [robots](https://vyos.io)
Diffstat (limited to '.github')
l---------.github/copilot-instructions.md1
-rw-r--r--.github/workflows/validate.yml29
2 files changed, 30 insertions, 0 deletions
diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md
new file mode 120000
index 0000000..be77ac8
--- /dev/null
+++ b/.github/copilot-instructions.md
@@ -0,0 +1 @@
+../AGENTS.md \ No newline at end of file
diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
new file mode 100644
index 0000000..f6096b0
--- /dev/null
+++ b/.github/workflows/validate.yml
@@ -0,0 +1,29 @@
+name: validate
+on:
+ pull_request:
+ push:
+ branches: [production]
+ workflow_dispatch:
+
+jobs:
+ validate:
+ runs-on: ubuntu-latest
+ permissions:
+ contents: read
+ steps:
+ - name: Audit egress
+ continue-on-error: true
+ uses: bullfrogsec/bullfrog@7bc9b6e13e2dd9cbe5861f33bc26dc6bdb9d9ed2 # v0.10.0
+ with:
+ egress-policy: audit
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+ with:
+ persist-credentials: false
+ - name: Validate codecov.yml structure
+ run: |
+ set -euo pipefail
+ response=$(curl -sS --fail-with-body -X POST \
+ --connect-timeout 10 --max-time 60 \
+ --data-binary @codecov.yml \
+ https://codecov.io/validate)
+ echo "$response"