<feed xmlns='http://www.w3.org/2005/Atom'>
<title>vyos-1x.git/.github/workflows, branch feature/T9082-codeql-cpp</title>
<subtitle>VyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
</subtitle>
<id>https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp</id>
<link rel='self' href='https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/'/>
<updated>2026-07-14T12:18:28+00:00</updated>
<entry>
<title>ci: T9082: scan C code with CodeQL (add c-cpp, build-mode none)</title>
<updated>2026-07-14T12:18:28+00:00</updated>
<author>
<name>Yuriy Andamasov</name>
<email>yuriy@vyos.io</email>
</author>
<published>2026-07-14T12:18:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=482d9a430121b7a93c199121e03bb9f3bdb612d0'/>
<id>urn:sha1:482d9a430121b7a93c199121e03bb9f3bdb612d0</id>
<content type='text'>
The caller previously scanned only Python, leaving the repo's C sources
unanalyzed. build-mode 'none' (codeql-action v4) extracts C/C++ without
a build; final mode subject to the ipaddrcheck canary coverage
comparison under T9082.

🤖 Generated by [robots](https://vyos.io)
</content>
</entry>
<entry>
<title>ci: T9047: grant issues: write to stale workflow token (#5309)</title>
<updated>2026-07-03T15:54:27+00:00</updated>
<author>
<name>Yuriy Andamasov</name>
<email>yuriy@vyos.io</email>
</author>
<published>2026-07-03T15:54:27+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=be2a59c118fa66808e3734492d2a40cbb083ec8e'/>
<id>urn:sha1:be2a59c118fa66808e3734492d2a40cbb083ec8e</id>
<content type='text'>
</content>
</entry>
<entry>
<title>T9037: Could not build ISO image for integration tests</title>
<updated>2026-07-01T10:13:40+00:00</updated>
<author>
<name>Andrii Klymenko</name>
<email>a.klymenko@vyos.io</email>
</author>
<published>2026-07-01T10:13:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=ddd04e18109ad5946d03c6b566dc4d10c7959152'/>
<id>urn:sha1:ddd04e18109ad5946d03c6b566dc4d10c7959152</id>
<content type='text'>
Added a step to clone vyos-1x source code into the build directory. It is necessary to have these files in this directory in cases where we perform the build process during a backport. We use vyos-build scripts from the original branch during integration tests for this process.</content>
</entry>
<entry>
<title>ci: T8490: drop legacy per-repo typos caller (now provided by org ruleset) (#5302)</title>
<updated>2026-06-29T16:55:36+00:00</updated>
<author>
<name>Yuriy Andamasov</name>
<email>yuriy@vyos.io</email>
</author>
<published>2026-06-29T16:55:36+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=0aafa5b25527e5c5d8064ec05c0ed33cc2724fd6'/>
<id>urn:sha1:0aafa5b25527e5c5d8064ec05c0ed33cc2724fd6</id>
<content type='text'>
The typos check is now enforced fleet-wide via the vyos-org repository ruleset
`require-typos-pilot-2026-06-18` (active), which injects the standalone
`typos.yml` from vyos/.github. The per-repo `check-typos.yml` caller (the lone
remaining consumer of the old workflow_call reusable) is redundant — remove it.

🤖 Generated by [robots](https://vyos.io)</content>
</entry>
<entry>
<title>chore(mirror): remove force_workspace backport wrapper (R4 mothballed) (#5247)</title>
<updated>2026-06-02T00:38:28+00:00</updated>
<author>
<name>Yuriy Andamasov</name>
<email>yuriy@vyos.io</email>
</author>
<published>2026-06-02T00:38:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=09240f799565f12a13de6f718e36fa6165d9e865'/>
<id>urn:sha1:09240f799565f12a13de6f718e36fa6165d9e865</id>
<content type='text'>
Mergify ignore_conflicts:true already creates the backport workspace PR +
resolves toward theirs + applies backport-conflict for path-drift conflicts
(verified by canary VyOS-Networks/ipaddrcheck#26/#27). force_workspace's
'No backport have been created' trigger never fires under that config.
T8943 / IS-510.</content>
</entry>
<entry>
<title>ci(mirror-rollout-4): add force_workspace backport companion wrapper (#5246)</title>
<updated>2026-06-01T23:19:34+00:00</updated>
<author>
<name>Yuriy Andamasov</name>
<email>yuriy@vyos.io</email>
</author>
<published>2026-06-01T23:19:34+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=791ceecb8d73d02bef181455398b474cf61c253e'/>
<id>urn:sha1:791ceecb8d73d02bef181455398b474cf61c253e</id>
<content type='text'>
Source-side wrapper (mirrored to the VyOS-Networks twin) for the public
vyos/.github force_workspace reusable. Inert on this public source (owner
guard); active on the mirror. force_workspace_enabled per-consumer (default false).

🤖 Generated by [robots](https://vyos.io)</content>
</entry>
<entry>
<title>T8943: ci: add lts-name-check advisory caller</title>
<updated>2026-06-01T09:35:41+00:00</updated>
<author>
<name>Yuriy Andamasov</name>
<email>yuriy@andamasov.com</email>
</author>
<published>2026-06-01T09:35:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=6a53f9888afccc9d6d1cb5817b0da26b253289eb'/>
<id>urn:sha1:6a53f9888afccc9d6d1cb5817b0da26b253289eb</id>
<content type='text'>
Adds the source-side LTS-name advisory caller (mirror-pipeline). Non-blocking;
posts a generic advisory if a PR title/body references a release-train branch name.

🤖 Generated by [robots](https://vyos.io)</content>
</entry>
<entry>
<title>T8943: migrate pr-mirror wrapper to canonical stub (#5243)</title>
<updated>2026-05-31T23:00:43+00:00</updated>
<author>
<name>Yuriy Andamasov</name>
<email>yuriy@vyos.io</email>
</author>
<published>2026-05-31T23:00:43+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=2b2922a2f0bc2f34b26dc6f7739af53accaaef3a'/>
<id>urn:sha1:2b2922a2f0bc2f34b26dc6f7739af53accaaef3a</id>
<content type='text'>
Mirror Pipeline Rollout 2 Task 6. Uniform canonical wrapper:
trigger branches [rolling, production], permissions: contents: read,
drop redundant wrapper-level MIRROR_ENABLED guard (now central).

🤖 Generated by [robots](https://vyos.io)</content>
</entry>
<entry>
<title>ci: T8943: migrate branch-name refs current-&gt;rolling (rollout 1c) (#5241)</title>
<updated>2026-05-30T15:38:38+00:00</updated>
<author>
<name>Yuriy Andamasov</name>
<email>yuriy@vyos.io</email>
</author>
<published>2026-05-30T15:38:38+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=4cf6bd8d69cbd4010e4c73e768aed067c1ce6907'/>
<id>urn:sha1:4cf6bd8d69cbd4010e4c73e768aed067c1ce6907</id>
<content type='text'>
Tracking: T8943</content>
</entry>
<entry>
<title>ci: T8943: sweep HIGH-producer pins to renamed branches (rollout 1c) (#5240)</title>
<updated>2026-05-30T12:56:45+00:00</updated>
<author>
<name>Yuriy Andamasov</name>
<email>yuriy@vyos.io</email>
</author>
<published>2026-05-30T12:56:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/vyos-1x.git/commit/?id=0a46c06e46dc7f77408a4a35c429f3314d6825a5'/>
<id>urn:sha1:0a46c06e46dc7f77408a4a35c429f3314d6825a5</id>
<content type='text'>
Rewrites uses: pins to the three HIGH-fanout producers (vyos/.github,
vyos/vyos-cla-signatures, VyOS-Networks/vyos-reusable-workflows) from their
old default branch to the new production compat branch staged in Task 1.
No functional change; pin-ref rewrite only.

Tracking: T8943</content>
</entry>
</feed>
