Skip to content

Isolate audit installs from lifecycle scripts#4452

Open
rogierx wants to merge 1 commit into
orchestration-agent:mainfrom
rogierx:bounty-4438-disable-lifecycle-audit-installs
Open

Isolate audit installs from lifecycle scripts#4452
rogierx wants to merge 1 commit into
orchestration-agent:mainfrom
rogierx:bounty-4438-disable-lifecycle-audit-installs

Conversation

@rogierx
Copy link
Copy Markdown

@rogierx rogierx commented May 25, 2026

Fixes #4438.

Summary

  • split lint/audit into a separate CI job that installs with uv sync --no-install-project --no-build
  • keep tests on the normal project install and add an explicit package build job with uv build
  • document which CI jobs allow package/build scripts
  • add workflow regression coverage and export AgentStatus so the current suite can collect

Validation

  • PYTHONDONTWRITEBYTECODE=1 uv run pytest tests/test_ci_workflow.py -q
  • PYTHONDONTWRITEBYTECODE=1 uv run pytest -q --ignore=tests/test_metrics.py
  • PYTHONDONTWRITEBYTECODE=1 uv run flake8 tests/test_ci_workflow.py src/agent/__init__.py
  • PYTHONDONTWRITEBYTECODE=1 python3 -m py_compile tests/test_ci_workflow.py src/agent/__init__.py
  • uv sync --no-install-project --no-build --dry-run
  • uv build
  • git diff --check

I checked existing #4438 entries before submitting; this version keeps audit/lint isolated from runtime install, blocks source builds for the audit install, and adds regression coverage.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[ Bounty $6k ] [ CI ] Disable lifecycle scripts during install audit — package validation jobs

1 participant