Skip to content

feat(test): add test infrastructure and fix test suite (Phase T0) #13

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
manas-fortifyroot merged 2 commits into from
Mar 29, 2026
Merged

feat(test): add test infrastructure and fix test suite (Phase T0) #13

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
f2797cd
fix(ci): add secret scan job, split all-tests into non-fr-tests
manas-fortifyroot Mar 28, 2026
bcbdac0
fix(ci): exclude example files and tighten secret scan regex
manas-fortifyroot Mar 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .env.test.example
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,16 +13,16 @@

# --- LLM Provider API Keys (for cassette recording) ---
# OpenAI: https://platform.openai.com/api-keys
OPENAI_API_KEY=sk-replace-with-real-key
OPENAI_API_KEY=YOUR_OPENAI_KEY_HERE

# Anthropic: https://console.anthropic.com/settings/keys
ANTHROPIC_API_KEY=sk-ant-replace-with-real-key
ANTHROPIC_API_KEY=YOUR_ANTHROPIC_KEY_HERE

# Google AI Studio (Gemini): https://aistudio.google.com/apikey
GOOGLE_API_KEY=replace-with-real-key

# Groq: https://console.groq.com/keys
GROQ_API_KEY=gsk_replace-with-real-key
GROQ_API_KEY=YOUR_GROQ_KEY_HERE

# Mistral: https://console.mistral.ai/api-keys/
MISTRAL_API_KEY=replace-with-real-key
Expand All @@ -40,7 +40,7 @@ WRITER_API_KEY=replace-with-real-key
REPLICATE_API_TOKEN=replace-with-real-key

# OpenRouter (budget-friendly proxy): https://openrouter.ai/keys
OPENROUTER_API_KEY=sk-or-replace-with-real-key
OPENROUTER_API_KEY=YOUR_OPENROUTER_KEY_HERE

# --- AWS (for Bedrock / SageMaker cassette recording) ---
# AWS_ACCESS_KEY_ID=replace-with-real-key
Expand Down
23 changes: 23 additions & 0 deletions .github/workflows/fr-pr.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,29 @@ concurrency:
cancel-in-progress: true

jobs:
secret-scan:
name: Secret Policy Check
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@v4

- name: Fail on hardcoded provider API keys
shell: bash
run: |
set -euo pipefail

regex='(sk-(proj-)?[A-Za-z0-9_-]{20,}|sk-or-v1-[A-Za-z0-9]{20,}|sk-ant-[A-Za-z0-9_-]{20,}|gsk_[A-Za-z0-9_-]{20,})'

if git grep -nI -E "$regex" -- . ':(exclude)*.lock' ':(exclude)*.env.example' ':(exclude)*.env.*.example'; then
echo "::error::Potential hardcoded provider key detected. Remove it and use placeholders or GitHub Secrets."
exit 1
fi

echo "No hardcoded provider key patterns detected."

fr-tests:
needs: secret-scan
name: FR Tests (py${{ matrix.python-version }})
runs-on: ubuntu-latest
timeout-minutes: 45
Expand Down Expand Up @@ -49,6 +71,7 @@ jobs:
if-no-files-found: ignore

non-fr-tests:
needs: secret-scan
name: Non-FR Tests (py${{ matrix.python-version }})
runs-on: ubuntu-latest
timeout-minutes: 60
Expand Down
Loading