Haitao Pan
07e11cc18d
ci(base-images): add Trivy vuln scan for built images
2025-12-06 18:52:18 +08:00
Haitao Pan
754327b559
ci(build-service-images): switch base images to public upstream defaults
...
Replaced internal GHCR base images with upstream Node and Go images
(node:22-bookworm, node:22-slim, golang:1.25) to avoid auth failures
and unblock builds on fresh runners. Downstream logic unchanged.
2025-12-06 16:41:38 +08:00
Haitao Pan
d850d37c32
fix(ci): add checkout step for local actions and rename pipeline to XControl Unified CI/CD Pipeline
2025-12-04 22:15:49 +08:00
Haitao Pan
47fb88f55c
ci: simplify image fallback logic with non-empty defaults
2025-12-04 21:17:38 +08:00
Haitao Pan
437b367032
ci(build-service-images): add default node/go runtime image values
2025-12-04 21:09:56 +08:00
Haitao Pan
d733981c22
ci(service-images): remove image-ref indirection and simplify build args
2025-12-04 20:58:53 +08:00
Haitao Pan
95e2a94461
ci: simplify service image workflow by removing prepare-image-refs indirection
2025-12-04 20:52:03 +08:00
Haitao Pan
bc13268279
ci(workflow): rename base-image inputs and simplify service build
...
Replaces the old *_digest inputs with clearer *_image references that
accept full repo URLs. Cleans up the service matrix and switches the
build step to proper context/file usage. Removes unused base image args
to match current service needs.
2025-12-04 20:42:33 +08:00
9a5ee27cb2
Adjust workflow build directories ( #749 )
2025-12-04 20:28:44 +08:00
Haitao Pan
e8964a9902
fix(account,ci): adjust image digests and simplify account config handling
2025-12-04 20:21:57 +08:00
Haitao Pan
c3fab178d8
ci(pipeline): fix CD job dependency to wait for service image build
2025-12-04 19:54:33 +08:00
0f14da2623
Extract base image preparation script ( #748 )
2025-12-04 19:48:46 +08:00
2d9294f002
Update service build workflow inputs ( #747 )
2025-12-04 16:14:19 +08:00
Haitao Pan
060a089f55
chore: workflow tweaks + go-runtime rename + Dockerfile fixes
2025-12-04 15:07:23 +08:00
Haitao Pan
a0c9e328ef
merged: go-runtime.Dockerfile & go-builder.Dockerfile -> go-base.Dockerfile
2025-12-04 14:52:33 +08:00
692a990098
Use default registry for base image workflow ( #746 )
2025-12-04 14:39:51 +08:00
Haitao Pan
affeb3fbb9
reverted: build-base-images.yml
2025-12-04 14:17:03 +08:00
Haitao Pan
859a2a4902
ci(build-base-images): correct workflow name to 'Build Base Images'
2025-12-04 14:09:13 +08:00
Haitao Pan
1fdd130b7d
ci(build-service-images): remove illegal GITHUB_TOKEN declaration
2025-12-04 14:07:41 +08:00
Haitao Pan
3cf600c13d
ci: rewrite base-image workflow into service-image builder
2025-12-04 14:04:39 +08:00
b8b5c18511
Fix build-service workflow secrets declaration ( #744 )
2025-12-04 13:53:38 +08:00
7b71201841
Fix workflow syntax issues ( #743 )
2025-12-04 13:43:43 +08:00
0d45148d5d
Fix workflow secrets inheritance usage ( #742 )
2025-12-04 13:39:04 +08:00
b18ba8162d
Fix pipeline workflow syntax ( #741 )
2025-12-04 13:33:36 +08:00
Haitao Pan
48eb1b79df
ci: replace composite actions with reusable workflows and extract scripts
2025-12-04 13:20:52 +08:00
Haitao Pan
364857c691
ci(build): move image build steps out of build action into main pipeline
2025-12-04 11:59:36 +08:00
Haitao Pan
2eadd6d310
ci(pipeline): split CI and CD stages; remove env from CI jobs
...
CI jobs no longer carry environment vars and depend only on branches.
Deploy remains environment-aware and runs only on workflow_dispatch.
2025-12-04 11:34:29 +08:00
a76acab06d
Fix workflow environment handling ( #739 )
2025-12-04 11:10:25 +08:00
Haitao Pan
0259f56cc3
ci(pipeline): refactor GitHub Actions to simplify matrix and unify environment control
2025-12-04 11:03:31 +08:00
Haitao Pan
3acd9512e5
ci(pipeline): replace YAML anchors with global matrix env vars
...
GitHub Actions does not support YAML anchors (`x-matrix`), so the
pipeline has been updated to use JSON-based global matrix variables
(MATRIX_PLATFORM / MATRIX_SERVICE / MATRIX_ENVIRONMENT) and
fromJson() inside each job's strategy.
No logic changed: the 5-stage pipeline (code-quality → build → test
→ security → deploy) keeps the same matrix behaviour with a single
source of truth.
2025-12-04 10:54:50 +08:00
8ee35d1765
Refactor CI pipeline with matrix stages ( #737 )
2025-12-04 10:40:18 +08:00
Haitao Pan
e7847fa690
update workflows/build-and-release.yml
2025-12-03 23:00:30 +08:00
fd1cfc5238
chore: wire service builds to base image digests
2025-12-03 19:01:01 +08:00
Haitao Pan
33958d6da8
ci: replace metadata-action with reusable auto-tag action
2025-12-03 18:36:13 +08:00
Haitao Pan
3bacad3e36
ci: update GHCR org to cloud-neutral-toolkit
2025-12-03 17:59:29 +08:00
Haitao Pan
e4bf655e94
rename postgres-extensions.Dockerfile -> postgres-runtime-wth-extensions.Dockerfile
2025-12-03 16:08:52 +08:00
8f74d84225
Fix base image workflow inputs and runtime build ( #733 )
2025-12-03 15:55:36 +08:00
Haitao Pan
14d5ec7253
workflows: update ORG name -> cloudneutral-lab
2025-12-03 12:37:08 +08:00
e5667805ef
Refactor build-and-release pipeline ( #732 )
2025-12-02 23:11:47 +08:00
Haitao Pan
a7f4e6e7bc
add workflows: build-base-images & build-service-images
2025-12-02 22:56:44 +08:00
shenlan
d5fda5e53f
Add dashboard UI tests and CI coverage ( #556 )
2025-10-17 16:52:28 +08:00
shenlan
70420eb3d3
Add CMS configuration schema, docs, and validation ( #551 )
2025-10-17 16:41:22 +08:00
shenlan
255dc84492
Move dashboard frontend out of ui namespace ( #538 )
2025-10-17 12:36:27 +08:00
shenlan
f7fe6d6261
Add reusable security checks workflow ( #364 )
2025-10-02 11:23:36 +08:00
Haitao Pan
1561a1d600
ci(workflows): add changelog generation for GitHub release
2025-09-23 08:58:26 +08:00
shenlan
471c621b53
chore(ci): enforce ansible callbacks ( #271 )
2025-09-20 22:44:05 +08:00
shenlan
87f844f371
Remove skippy callback plugin usage ( #270 )
2025-09-20 22:26:49 +08:00
shenlan
9615a5f056
fix: stabilize release artifact download ( #268 )
2025-09-20 21:52:39 +08:00
Haitao Pan
5e481c13e9
ci(workflows): remove inline ansible inventory generation
2025-09-20 21:33:32 +08:00
shenlan
8eb0186dda
Ensure ansible vault password is configured ( #267 )
2025-09-20 19:57:51 +08:00
