Skip to content

chore(ci): run CI through a reusable pipeline with a gate - #235

Open
Guillaume (guillaumejparis) wants to merge 3 commits into
mainfrom
chore/ci-pipeline
Open

Guillaume (guillaumejparis) wants to merge 3 commits into
mainfrom
chore/ci-pipeline

Conversation

@guillaumejparis

Copy link
Copy Markdown
Member

Proposed changes

  • Move every CI job into a reusable _ci-pipeline.yml, called by the CI workflow (a nightly can call it the same way), like openaev core.
  • Move the OS trust store check into the pipeline.
  • Add a ✅ Pipeline Gate job that fails when any job fails or is cancelled. Branch protection only needs to require pipeline / ✅ Pipeline Gate.

Stacked on the smoke-test PR; retarget to main once it is merged.

🤖 Generated with Claude Code

@guillaumejparis Guillaume (guillaumejparis) added the filigran team Item from the Filigran team. label Oct 9, 2026
Base automatically changed from chore/smoketest to main October 9, 2026 15:10
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Copilot AI balanced review requested due to automatic review settings October 9, 2026 15:13

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The jobs were transferred consistently, and the gate correctly covers all upstream results.

0 open findings

What changed in this PR

Centralizes CI into a reusable workflow and introduces a single branch-protection gate.

Changes:

  • Moves all CI and OS trust-store jobs into _ci-pipeline.yml.
  • Adds a gate covering every pipeline job.
  • Updates CI invocation and retry behavior.
File Description
.github/​workflows/​_ci-pipeline.yml Defines the reusable pipeline and gate.
.github/​workflows/​agent-ci.yml Calls the reusable pipeline.
.github/​workflows/​os-trust-store.yml Removes the superseded standalone workflow.
.github/​workflows/​ci-retry.yml Retries only the consolidated CI workflow.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

…ly (#236)

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Composite actions need an explicit shell, and the tests action picked bash
everywhere. On Windows, Git Bash puts its own whoami ahead of the Windows one,
which broke the current-user test. Windows now keeps the runner default, pwsh.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

filigran team Item from the Filigran team.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants