Skip to content

main to develop #220

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
gowthamrao merged 16 commits into from
May 15, 2026
Merged

main to develop #220

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
16 commits
Select commit Hold shift + click to select a range
4b995c9
chore: use lychee-action@master to fix archive extraction bug
gowthamrao May 15, 2026
2e880d1
feat: add GitHub Actions workflow for automated PyPI releases and con…
gowthamrao May 15, 2026
dbe7944
ci: add GitHub Actions workflow for linting, security scanning, testi…
gowthamrao May 15, 2026
b166a6e
fix: dockerize coreason-runtime correctly and fix publish tags
gowthamrao May 15, 2026
95cadbd
fix: install git for hatch-vcs
gowthamrao May 15, 2026
c86242a
build: update dependency versions in pyproject.toml
gowthamrao May 15, 2026
111599f
fix: resolve license missing error and harden docker build
gowthamrao May 15, 2026
08f19cb
fix: add disk cleanup to release workflows
gowthamrao May 15, 2026
35b3f3b
build: update coreason-manifest to v0.72.1
gowthamrao May 15, 2026
5a79230
fix: add skip-existing to PyPI publish
gowthamrao May 15, 2026
248fe73
build: optimize Docker build with uv caching, multi-stage hardening, …
gowthamrao May 15, 2026
fc93044
fix(ci): quote Dockerfile RUN commands to satisfy SC2046 and Hadolint
gowthamrao May 15, 2026
9326a70
Merge branch 'develop' into main
gowthamrao May 15, 2026
0b16fe7
fix(ci): pin GitHub Actions to commit SHAs for security
gowthamrao May 15, 2026
24d8c78
fix(ci): correct action SHAs in runtime workflows
gowthamrao May 15, 2026
96550fb
fix(ci): pin all GitHub Actions to commit SHAs across all workflows
gowthamrao May 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 9 additions & 12 deletions .dockerignore
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,14 +1,11 @@
# .dockerignore
.git/
.github/
.vscode/
.venv/
__pycache__/
.pytest_cache/
.ruff_cache/
.mypy_cache/
.git
.venv
.uv_cache
.ruff_cache
.pytest_cache
__pycache__
*.pyc
tests/
docs/
data/
htmlcov/
*.log
scratch/
infrastructure/
30 changes: 15 additions & 15 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,17 +33,17 @@ jobs:
run: sudo chown -R $(whoami):$(whoami) ${{ github.workspace }} || true

- name: Harden Runner
uses: step-security/harden-runner@v2
uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
with:
egress-policy: audit

- uses: actions/checkout@v4
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: Substrate Purity Verification
run: git clean -xfd -e .uv_cache

- name: Install uv
uses: astral-sh/setup-uv@v5
uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
with:
enable-cache: true
cache-dependency-glob: "uv.lock"
Expand Down Expand Up @@ -80,9 +80,9 @@ jobs:
shell: bash

- name: Docs Link Validation
uses: lycheeverse/lychee-action@v2
uses: lycheeverse/lychee-action@f613c4a64e50d792e0b31ec34bbcbba12263c6a6 # v2.3.0
with:
lycheeVersion: v0.24.1
lycheeVersion: v0.22.0
args: >-
--exclude-loopback
--accept 200,204,301,429
Expand Down Expand Up @@ -114,17 +114,17 @@ jobs:
run: sudo chown -R $(whoami):$(whoami) ${{ github.workspace }} || true

- name: Harden Runner
uses: step-security/harden-runner@v2
uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
with:
egress-policy: audit

- uses: actions/checkout@v4
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: Substrate Purity Verification
run: git clean -xfd -e .uv_cache

- name: Install uv
uses: astral-sh/setup-uv@v5
uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
with:
enable-cache: true
cache-dependency-glob: "uv.lock"
Expand Down Expand Up @@ -165,17 +165,17 @@ jobs:
run: sudo chown -R $(whoami):$(whoami) ${{ github.workspace }} || true

- name: Harden Runner
uses: step-security/harden-runner@v2
uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
with:
egress-policy: audit

- uses: actions/checkout@v4
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: Substrate Purity Verification
run: git clean -xfd -e .uv_cache

- name: Install uv
uses: astral-sh/setup-uv@v5
uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
with:
enable-cache: true
cache-dependency-glob: "uv.lock"
Expand All @@ -200,7 +200,7 @@ jobs:
shell: bash

- name: Upload coverage to Codecov
uses: codecov/codecov-action@v6
uses: codecov/codecov-action@053f9b74638557590800a301da1ba82351507e2c # v6.0.0
with:
token: ${{ secrets.CODECOV_TOKEN }}
fail_ci_if_error: true
Expand Down Expand Up @@ -231,17 +231,17 @@ jobs:
run: sudo chown -R $(whoami):$(whoami) ${{ github.workspace }} || true

- name: Harden Runner
uses: step-security/harden-runner@v2
uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
with:
egress-policy: audit

- uses: actions/checkout@v4
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: Substrate Purity Verification
run: git clean -xfd -e .uv_cache

- name: Install uv
uses: astral-sh/setup-uv@v5
uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
with:
enable-cache: true
cache-dependency-glob: "uv.lock"
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/container-scan.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,14 +20,14 @@ jobs:
actions: read
steps:
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: Basic Check
run: ls -la

- name: Run Trivy vulnerability scanner in fs mode
if: hashFiles('Dockerfile') != ''
uses: aquasecurity/trivy-action@master
uses: aquasecurity/trivy-action@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 # v0.36.0
with:
scan-type: 'fs'
ignore-unfixed: true
Expand All @@ -37,7 +37,7 @@ jobs:

- name: Upload Trivy scan results to GitHub Security tab
if: hashFiles('Dockerfile') != ''
uses: github/codeql-action/upload-sarif@v4
uses: github/codeql-action/upload-sarif@f25eda876ebb741d872b63b9f2c6dfdd77f14b83 # v4.35.5
with:
sarif_file: 'trivy-results.sarif'
continue-on-error: true
10 changes: 5 additions & 5 deletions .github/workflows/docs.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,17 +24,17 @@ jobs:
url: ${{ steps.deployment.outputs.page_url }}
steps:
- name: Harden Runner
uses: step-security/harden-runner@v2
uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
with:
egress-policy: audit

- uses: actions/checkout@v4
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0
fetch-tags: true

- name: Install uv
uses: astral-sh/setup-uv@v5
uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
with:
enable-cache: true
cache-dependency-glob: "uv.lock"
Expand All @@ -50,10 +50,10 @@ jobs:
run: uv run zensical build --clean

- name: Upload artifact
uses: actions/upload-pages-artifact@v3
uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
with:
path: site

- name: Deploy to GitHub Pages
id: deployment
uses: actions/deploy-pages@v4
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
6 changes: 3 additions & 3 deletions .github/workflows/nightly-fuzzing.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,14 +18,14 @@ jobs:
timeout-minutes: 30
steps:
- name: Harden Runner
uses: step-security/harden-runner@v2
uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2.19.3
with:
egress-policy: audit

- uses: actions/checkout@v4
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: Install uv
uses: astral-sh/setup-uv@v5
uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
with:
enable-cache: true
cache-dependency-glob: "uv.lock"
Expand Down
Loading
Loading