Skip to content

ci: add PR check workflow - #7

Open
minhdqdev wants to merge 1 commit into
mainfrom
ci/pr-check
Open

minhdqdev wants to merge 1 commit into
mainfrom
ci/pr-check

Conversation

@minhdqdev

Copy link
Copy Markdown
Contributor

Adds a pre-merge check that runs on every pull request, calling the shared pr-check.yml in minhdqdev-org/github-actions-workflows.

  • Secret scan (gitleaks) of the commits the PR adds
  • Semgrep, reporting only findings new relative to the base
  • Trivy lockfile vulnerability scan
  • hadolint, when the repo has a Dockerfile
  • The repo's own lint/type/test commands where they pass on the base branch today

This PR is its own first run. It builds and pushes nothing. No version bump: the change is a workflow file only, and merging to the default branch re-runs ci.yml, so bump the version first if that repo's tag convention requires it.

🤖 Generated with Claude Code

https://claude.ai/code/session_011fUUpWvv7S8TonsdFLYEWk

Calls the shared pr-check workflow on pull requests: secret scan of the PR's
commits, Semgrep findings new vs the base, lockfile vulnerability scan and
Dockerfile lint, plus this repo's own checks where they pass today.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011fUUpWvv7S8TonsdFLYEWk
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant