Andreas/terraform-provider-omada
Andreas/terraform-provider-omada
Watch
1
0
Fork
You've already forked terraform-provider-omada
 0
Code Issues 2 Pull requests 2 Projects Releases 1 Packages Wiki Activity Actions

ci: isolate PR validation from privileged image publishing #10

Open
Andreas wants to merge 2 commits from fix/ci-required-gate-20261011 into main
pull from: fix/ci-required-gate-20261011
merge into: Andreas:main
Conversation 0 Commits 2 Files changed 5 +78 -10
Andreas commented 2026-10-11 11:12:57 +00:00
Owner
Copy link

Move PR validation to the isolated general pool and extract digest-pinned OpenTofu without a container runtime. Preserve privileged container build/offline proofs and signed publishing on protected main only. Add an always-emitted summary and archive superseded upstream GitHub workflows outside active directories. CI.md records that PRs do not prove main container-runtime tests. Actionlint passes with Forgejo URL normalization, and git diff --check passes; required protection awaits successful live checks.

Observed blocker at head df2aa28, run 53945: both-engine mock acceptance, docs and lint passed; govulncheck correctly failed (exit 3). It reports nine called standard-library vulnerabilities in Go 1.26.8, fixed in Go 1.26.9: GO-2026-6617, GO-2026-6613, GO-2026-6612, GO-2026-6611, GO-2026-6610, GO-2026-6608, GO-2026-6607, GO-2026-6605 and GO-2026-6603. The report also identifies golang.org/x/net v0.58.0, fixed in v0.60.0, for GO-2026-6617/6612/6611/6610/6603; its final summary lists four imported vulnerabilities without an apparent call.

Keep govulncheck and all test gates enforced. Dependency/toolchain remediation requires a separate reviewed repair, including the repository's exact Go-version contracts; this CI-only PR does not upgrade Go or x/net, suppress advisories, merge through failures, or install an unproven required context.

Move PR validation to the isolated general pool and extract digest-pinned OpenTofu without a container runtime. Preserve privileged container build/offline proofs and signed publishing on protected main only. Add an always-emitted summary and archive superseded upstream GitHub workflows outside active directories. CI.md records that PRs do not prove main container-runtime tests. Actionlint passes with Forgejo URL normalization, and git diff --check passes; required protection awaits successful live checks. Observed blocker at head df2aa28, run 53945: both-engine mock acceptance, docs and lint passed; govulncheck correctly failed (exit 3). It reports nine called standard-library vulnerabilities in Go 1.26.8, fixed in Go 1.26.9: GO-2026-6617, GO-2026-6613, GO-2026-6612, GO-2026-6611, GO-2026-6610, GO-2026-6608, GO-2026-6607, GO-2026-6605 and GO-2026-6603. The report also identifies golang.org/x/net v0.58.0, fixed in v0.60.0, for GO-2026-6617/6612/6611/6610/6603; its final summary lists four imported vulnerabilities without an apparent call. Keep govulncheck and all test gates enforced. Dependency/toolchain remediation requires a separate reviewed repair, including the repository's exact Go-version contracts; this CI-only PR does not upgrade Go or x/net, suppress advisories, merge through failures, or install an unproven required context.
ci: isolate PR validation from privileged image publishing
Some checks failed
Validate and package Omada provider / image (pull_request) Has been cancelled
Details
Validate and package Omada provider / Required checks (pull_request) Has been cancelled
Details
Validate and package Omada provider / provider (pull_request) Has been cancelled
Details
19f0cbba91
ci: archive unsupported upstream workflow triggers
Some checks failed
Validate and package Omada provider / provider (pull_request) Failing after 9m40s
Details
Validate and package Omada provider / image (pull_request) Has been skipped
Details
Validate and package Omada provider / Required checks (pull_request) Failing after 1s
Details
df2aa28ee4
Some checks failed
Validate and package Omada provider / provider (pull_request) Failing after 9m40s
Required
Details
Validate and package Omada provider / image (pull_request) Has been skipped
Details
Validate and package Omada provider / Required checks (pull_request) Failing after 1s
Details
Some required checks were not successful.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin fix/ci-required-gate-20261011:fix/ci-required-gate-20261011
git switch fix/ci-required-gate-20261011
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
Andreas/terraform-provider-omada!10
No description provided.