Skip to content

Fix CI and add essential GitHub security automation - #5

Merged
uscolective-byte merged 5 commits into
mainfrom
chore/github-actions-foundation-20261013
Oct 13, 2026
Merged

uscolective-byte merged 5 commits into
mainfrom
chore/github-actions-foundation-20261013

Conversation

@uscolective-byte

Copy link
Copy Markdown
Owner

Čo sa mení

  • opravuje Node/Cloudflare CI tak, aby nespúšťalo neexistujúci npm test
  • odstraňuje neplatný Webpack workflow (projekt Webpack nepoužíva)
  • pridáva kontrolu syntaxe všetkých JavaScript súborov
  • pridáva npm audit pre produkčné závislosti
  • pridáva wrangler deploy --dry-run bez nasadenia
  • pridáva CodeQL pre JavaScript/TypeScript
  • pridáva dependency review pre Pull Requesty
  • pridáva Dependabot pre npm a GitHub Actions
  • obmedzuje oprávnenia workflowov a zapína runner hardening

Prečo nie 50 Actions

Repozitár je malý Cloudflare Worker. Päť dôveryhodných Actions pokrýva jeho aktuálne potreby bez zbytočného supply-chain rizika a bez 50 externých závislostí.

Bezpečnosť

Tento PR nepridáva žiadne produkčné tajomstvá ani deploy do Cloudflare. Cloudflare krok je iba --dry-run.

Overenie

YAML súbory prešli lokálnym parserom. Plné GitHub Actions overenie závisí od dostupnosti GitHub-hosted runnerov; predchádzajúce joby v repozitári zlyhávali ešte pred vykonaním krokov.

@github-advanced-security

Copy link
Copy Markdown

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@uscolective-byte
uscolective-byte marked this pull request as ready for review October 13, 2026 17:24
@uscolective-byte
uscolective-byte merged commit 7b32183 into main Oct 13, 2026
6 checks passed
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-13T17:27:54.735992Z 887b525 Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants