b5e1c3a8f5
* feat: Add GitHub Actions workflows for security audits, CodeQL analysis, contributor updates, performance benchmarks, integration tests, fuzz testing, and reusable Rust build jobs - Implemented `sec-audit.yml` for Rust package security audits using `rustsec/audit-check` and `cargo-deny-action`. - Created `sec-codeql.yml` for CodeQL analysis scheduled twice daily. - Added `sync-contributors.yml` to update the NOTICE file with new contributors automatically. - Introduced `test-benchmarks.yml` for performance benchmarks using Criterion. - Established `test-e2e.yml` for running integration and end-to-end tests. - Developed `test-fuzz.yml` for fuzz testing with configurable runtime. - Created `test-rust-build.yml` as a reusable job for executing Rust commands with customizable parameters. - Documented main branch delivery flows in `main-branch-flow.md` for clarity on CI/CD processes. * ci(workflows): update workflow scripts and rename for clarity; remove obsolete lint feedback script * chore(ci): externalize workflow scripts and relocate main flow doc * chore(ci): align workflow names with file naming style
116 lines
3.5 KiB
YAML
116 lines
3.5 KiB
YAML
name: Sync Contributors
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
schedule:
|
|
# Run every Sunday at 00:00 UTC
|
|
- cron: '0 0 * * 0'
|
|
|
|
concurrency:
|
|
group: update-notice-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
permissions:
|
|
contents: write
|
|
pull-requests: write
|
|
|
|
jobs:
|
|
update-notice:
|
|
name: Update NOTICE with new contributors
|
|
runs-on: blacksmith-2vcpu-ubuntu-2404
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
|
|
|
|
- name: Fetch contributors
|
|
id: contributors
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
run: |
|
|
# Fetch all contributors (excluding bots)
|
|
gh api \
|
|
--paginate \
|
|
"repos/${{ github.repository }}/contributors" \
|
|
--jq '.[] | select(.type != "Bot") | .login' > /tmp/contributors_raw.txt
|
|
|
|
# Sort alphabetically and filter
|
|
sort -f < /tmp/contributors_raw.txt > contributors.txt
|
|
|
|
# Count contributors
|
|
count=$(wc -l < contributors.txt | tr -d ' ')
|
|
echo "count=$count" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Generate new NOTICE file
|
|
run: |
|
|
cat > NOTICE << 'EOF'
|
|
ZeroClaw
|
|
Copyright 2025 ZeroClaw Labs
|
|
|
|
This product includes software developed at ZeroClaw Labs (https://github.com/zeroclaw-labs).
|
|
|
|
Contributors
|
|
============
|
|
|
|
The following individuals have contributed to ZeroClaw:
|
|
|
|
EOF
|
|
|
|
# Append contributors in alphabetical order
|
|
sed 's/^/- /' contributors.txt >> NOTICE
|
|
|
|
# Add third-party dependencies section
|
|
cat >> NOTICE << 'EOF'
|
|
|
|
|
|
Third-Party Dependencies
|
|
=========================
|
|
|
|
This project uses the following third-party libraries and components,
|
|
each licensed under their respective terms:
|
|
|
|
See Cargo.lock for a complete list of dependencies and their licenses.
|
|
EOF
|
|
|
|
- name: Check if NOTICE changed
|
|
id: check_diff
|
|
run: |
|
|
if git diff --quiet NOTICE; then
|
|
echo "changed=false" >> "$GITHUB_OUTPUT"
|
|
else
|
|
echo "changed=true" >> "$GITHUB_OUTPUT"
|
|
fi
|
|
|
|
- name: Create Pull Request
|
|
if: steps.check_diff.outputs.changed == 'true'
|
|
env:
|
|
GH_TOKEN: ${{ github.token }}
|
|
COUNT: ${{ steps.contributors.outputs.count }}
|
|
run: |
|
|
branch_name="auto/update-notice-$(date +%Y%m%d)"
|
|
|
|
git config user.name "github-actions[bot]"
|
|
git config user.email "github-actions[bot]@users.noreply.github.com"
|
|
|
|
git checkout -b "$branch_name"
|
|
git add NOTICE
|
|
git commit -m "chore(notice): update contributor list"
|
|
git push origin "$branch_name"
|
|
|
|
gh pr create \
|
|
--title "chore(notice): update contributor list" \
|
|
--body "Auto-generated update to NOTICE file with $COUNT contributors." \
|
|
--label "chore" \
|
|
--label "docs" \
|
|
--draft || true
|
|
|
|
- name: Summary
|
|
run: |
|
|
echo "## NOTICE Update Results" >> "$GITHUB_STEP_SUMMARY"
|
|
echo "" >> "$GITHUB_STEP_SUMMARY"
|
|
if [ "${{ steps.check_diff.outputs.changed }}" = "true" ]; then
|
|
echo "✅ PR created to update NOTICE" >> "$GITHUB_STEP_SUMMARY"
|
|
else
|
|
echo "✓ NOTICE file is up to date" >> "$GITHUB_STEP_SUMMARY"
|
|
fi
|
|
echo "" >> "$GITHUB_STEP_SUMMARY"
|
|
echo "**Contributors:** ${{ steps.contributors.outputs.count }}" >> "$GITHUB_STEP_SUMMARY"
|