@@ -12,12 +12,12 @@ The CI pipeline is split into three independent workflows for optimal performanc
1212** Purpose** : Fast feedback on code style and type safety
1313** Jobs** :
1414- ` lint ` - Ruff linter checks
15- - ` format ` - Ruff formatter checks
15+ - ` format ` - Ruff formatter checks
1616- ` typecheck ` - ty type checker
1717
1818** Parallelization** : All jobs run in parallel (~ 1-2 min total)
1919
20- ** Security** :
20+ ** Security** :
2121- Uses ` pull_request ` trigger (read-only by default)
2222- ✅ SAFE: Only runs static analysis tools (no code execution)
2323- ❌ NO secrets or write permissions
@@ -31,7 +31,7 @@ The CI pipeline is split into three independent workflows for optimal performanc
3131** Jobs** :
3232- ` test ` - Unit tests with coverage reporting
3333
34- ** Permissions** :
34+ ** Permissions** :
3535- ` contents: read ` - Read-only access
3636
3737** Security** :
@@ -61,23 +61,23 @@ Fork PR opened
6161└─────────────────────────────────────────┘
6262 ↓ (1-2 min)
6363 ✓ Quick feedback to contributor
64-
64+
6565 ↓ (Runs in parallel)
66-
66+
6767┌─────────────────────────────────────────┐
6868│ test.yaml (auto-runs) │
6969│ └─ test (with coverage) │
7070└─────────────────────────────────────────┘
7171 ↓ (3-5 min)
72-
72+
7373 ↓ (Maintainer clicks "Approve and run")
74-
74+
7575┌─────────────────────────────────────────┐
7676│ build.yaml (requires approval) │
7777│ └─ build (package creation) │
7878└─────────────────────────────────────────┘
7979 ↓ (1-2 min)
80-
80+
8181 ✓ All checks passed, ready to merge
8282```
8383
@@ -140,4 +140,4 @@ This means fork PR workflows are disabled in repository settings:
140140
141141- [ GitHub Actions: Events that trigger workflows] ( https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows )
142142- [ Keeping your GitHub Actions secure] ( https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions )
143- - [ Using pull_request_target safely] ( https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
143+ - [ Using pull_request_target safely] ( https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
0 commit comments