Skip to content

Refactor/test flows - #169

Merged
mathieusouflis merged 7 commits into
mainfrom
refactor/test-flows
Jul 11, 2026
Merged

Refactor/test flows#169
mathieusouflis merged 7 commits into
mainfrom
refactor/test-flows

Conversation

@mathieusouflis

Copy link
Copy Markdown
Member

Summary

Closes #

Type of change

  • Bug fix
  • New feature
  • Refactor (no behavior change)
  • Performance improvement
  • Documentation
  • CI/CD / tooling
  • Breaking change

Changes

Testing

  • Added / updated tests
  • Manually tested locally
  • All existing tests pass

Checklist

  • Lint passes
  • Tests pass
  • Build succeeds
  • Documentation updated if applicable

Screenshots

- CI: discover enabled flow fixtures and run one matrix job per fixture
- Update test-flow: add -parallel and -list flags; run fixtures
  concurrently
- Implement worker pool to limit parallelism and cancellation on failure
- Add enabledCaseNames to collect active fixtures for matrix usage
- Add mutex in reporter to guard concurrent writes
- Update docs/contributor/test-flow.md to cover -parallel, -list, and CI
  behavior
Introduce per-project port mapping for Postgres and wire it into
generators and tests

- add internal/portutil/port.go with PostgresHostPort(projectName)
- switch docker-compose template to use DBPort from generator
- update postgres_docker_compose/generator.go to pass DBPort
- update postgres_env_example/generator.go to use dynamic port in
  DATABASE_URL
- serialize docker-compose usage in test runner to avoid port/name
  collisions
@github-actions

github-actions Bot commented Jul 11, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
See the Details below.

License Issues

.github/workflows/validate.yml

PackageVersionLicenseIssue Type
actions/checkout7.*.*NullUnknown License
actions/setup-go6.*.*NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
actions/actions/checkout 7.*.* 🟢 7
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 1018 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Packaging⚠️ -1packaging workflow not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 9security policy file detected
SAST🟢 10SAST tool is run on all commits
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
actions/actions/setup-go 6.*.* 🟢 5.3
Details
CheckScoreReason
Maintained🟢 34 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 9security policy file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST🟢 9SAST tool is not run on all commits -- score normalized to 9
actions/golangci/golangci-lint-action ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a 🟢 7.4
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 3Found 5/14 approved changesets -- score normalized to 3
Binary-Artifacts🟢 10no binaries found in the repo
Maintained🟢 1021 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 10security policy file detected
Branch-Protection🟢 4branch protection is not maximal on development and all release branches
SAST🟢 9SAST tool detected but not run on all commits

Scanned Files

  • .github/workflows/ci.yml
  • .github/workflows/validate.yml

Comment thread .github/workflows/ci.yml Fixed
Comment thread .github/workflows/ci.yml Fixed
@sonarqubecloud

Copy link
Copy Markdown

@mathieusouflis
mathieusouflis enabled auto-merge (rebase) July 11, 2026 15:32
@mathieusouflis
mathieusouflis disabled auto-merge July 11, 2026 15:44
@mathieusouflis
mathieusouflis merged commit d205e35 into main Jul 11, 2026
50 checks passed
@mathieusouflis
mathieusouflis deleted the refactor/test-flows branch July 11, 2026 15:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants