Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
61 changes: 0 additions & 61 deletions .github/workflows/agent-label-sync.yml

This file was deleted.

136 changes: 0 additions & 136 deletions .github/workflows/agent-task-queue.yml

This file was deleted.

31 changes: 31 additions & 0 deletions .github/workflows/applitools-visual.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,31 @@
name: Applitools Visual

on:
workflow_dispatch:
pull_request:
branches: [main, master]
Comment on lines +5 to +6
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Guard secret-backed visual jobs on pull_request events

This workflow runs on pull_request but depends on APPLITOOLS_API_KEY; for forked PRs GitHub does not provide repository secrets, so the visual step fails regardless of code correctness. The same pattern exists in the Chromatic workflow with CHROMATIC_PROJECT_TOKEN, which can block external contributions if these checks are required. Add an if guard for secret availability or restrict secret-backed runs to trusted events.

Useful? React with 👍 / 👎.

push:
branches: [main, master]

permissions:
contents: read

jobs:
applitools-visual:
name: Applitools Visual
runs-on: ubuntu-latest
defaults:
run:
working-directory: frontend/webcoder_ui
env:
APPLITOOLS_API_KEY: ${{ secrets.APPLITOOLS_API_KEY }}
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with:
node-version: '20'
cache: npm
cache-dependency-path: frontend/webcoder_ui/package-lock.json
- run: npm ci
- run: npx --yes playwright install --with-deps chromium
- run: npm run visual:applitools
32 changes: 32 additions & 0 deletions .github/workflows/chromatic-playwright.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,32 @@
name: Chromatic Playwright

on:
workflow_dispatch:
pull_request:
branches: [main, master]
push:
branches: [main, master]

permissions:
contents: read

jobs:
chromatic-playwright:
name: Chromatic Playwright
runs-on: ubuntu-latest
defaults:
run:
working-directory: frontend/webcoder_ui
steps:
- uses: actions/checkout@v4
- uses: actions/setup-node@v4
with:
node-version: '20'
cache: npm
cache-dependency-path: frontend/webcoder_ui/package-lock.json
- run: npm ci
- run: npx --yes playwright install --with-deps chromium
- run: npm run visual:chromatic:archive
- run: npx --yes chromatic --playwright --project-token=${{ secrets.CHROMATIC_PROJECT_TOKEN }}
env:
CHROMATIC_ARCHIVE_LOCATION: frontend/webcoder_ui/test-results
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Use archive path relative to the configured working directory

This job sets defaults.run.working-directory to frontend/webcoder_ui (line 19), but then passes CHROMATIC_ARCHIVE_LOCATION: frontend/webcoder_ui/test-results to the Chromatic CLI. Because the final run step also executes from frontend/webcoder_ui, that env var points to a nested path (frontend/webcoder_ui/frontend/webcoder_ui/test-results) instead of the archive generated by npm run visual:chromatic:archive, so the upload step can fail even when Playwright archiving succeeded.

Useful? React with 👍 / 👎.

33 changes: 0 additions & 33 deletions .github/workflows/codacy-zero.yml

This file was deleted.

62 changes: 16 additions & 46 deletions .github/workflows/codecov-analytics.yml
Original file line number Diff line number Diff line change
@@ -1,57 +1,27 @@
name: Codecov Analytics

permissions:
contents: read
id-token: write

on:
push:
branches: [main, master]
pull_request:
branches: [main, master]
workflow_dispatch:

permissions:
contents: read

jobs:
codecov-analytics:
name: Codecov Analytics
runs-on: ubuntu-latest
env:
shared-codecov-analytics:
permissions:
contents: read
id-token: write
uses: Prekzursil/quality-zero-platform/.github/workflows/reusable-codecov-analytics.yml@2be048255a27d55eb7be18b82091b57f29d34ee6
with:
repo_slug: ${{ github.repository }}
event_name: ${{ github.event_name }}
sha: ${{ github.event.pull_request.head.sha || github.sha }}
platform_repository: Prekzursil/quality-zero-platform
platform_ref: 2be048255a27d55eb7be18b82091b57f29d34ee6
secrets:
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
CODACY_API_TOKEN: ${{ secrets.CODACY_API_TOKEN }}
CODACY_ORGANIZATION_PROVIDER: gh
CODACY_USERNAME: Prekzursil
CODACY_PROJECT_NAME: ${{ github.event.repository.name }}
steps:
- uses: actions/checkout@v6
- uses: actions/setup-python@v6
with:
python-version: '3.12'
- uses: actions/setup-node@v6
with:
node-version: '20'

- name: Backend coverage
continue-on-error: true
run: |
mkdir -p coverage
python -m pip install --upgrade pip
python -m pip install -r backend/requirements.txt pytest pytest-cov
python -m pytest backend --cov=backend --cov-report=xml:backend/coverage.xml
- name: Frontend coverage
continue-on-error: true
run: |
npm --prefix frontend/webcoder_ui ci
npm --prefix frontend/webcoder_ui test -- --coverage --watch=false
- name: Upload coverage to Codecov
if: ${{ always() }}
uses: codecov/codecov-action@v5
with:
files: backend/coverage.xml,frontend/webcoder_ui/coverage/lcov.info
flags: backend,frontend
fail_ci_if_error: true
verbose: true
- name: Upload coverage to Codacy
if: ${{ always() }}
uses: codacy/codacy-coverage-reporter-action@v1
with:
api-token: ${{ env.CODACY_API_TOKEN }}
coverage-reports: backend/coverage.xml,frontend/webcoder_ui/coverage/lcov.info
Loading
Loading