fix(ci): quote the 7 step names that start with "[" so the gate file is valid YAML (coreci-chat#1)
ci / test-pglite (PGlite, default) (push) Failing after 10s
ci / test-postgres (Postgres 16, G-022 RLS) (push) Failing after 21s
ci / test-pglite (PGlite, default) (pull_request) Failing after 10s
ci / test-postgres (Postgres 16, G-022 RLS) (pull_request) Failing after 21s
ci / test-pglite (PGlite, default) (push) Failing after 10s
ci / test-postgres (Postgres 16, G-022 RLS) (push) Failing after 21s
ci / test-pglite (PGlite, default) (pull_request) Failing after 10s
ci / test-postgres (Postgres 16, G-022 RLS) (pull_request) Failing after 21s
This commit is contained in:
@@ -87,7 +87,7 @@ jobs:
|
||||
- name: Build (mcp package — dist for the smoke imports)
|
||||
run: pnpm --filter @coreci/mcp build
|
||||
|
||||
- name: [G-018,R-008] Import guard (no @coreci/llm-mock in prod source)
|
||||
- name: "[G-018,R-008] Import guard (no @coreci/llm-mock in prod source)"
|
||||
run: pnpm check:llm-mock-guard
|
||||
|
||||
- name: Unit + integration tests (PGlite)
|
||||
@@ -193,27 +193,27 @@ jobs:
|
||||
echo "DATABASE_URL=postgres://coreci_app:coreci_app_ci@$HOST:5432/coreci_ci" >> "$GITHUB_ENV"
|
||||
echo "CI_MIGRATOR_DATABASE_URL=postgres://migrator:migrator_ci@$HOST:5432/coreci_ci" >> "$GITHUB_ENV"
|
||||
|
||||
- name: [R-009] Setup CI roles (coreci_app NOBYPASSRLS, migrator BYPASSRLS)
|
||||
- name: "[R-009] Setup CI roles (coreci_app NOBYPASSRLS, migrator BYPASSRLS)"
|
||||
run: |
|
||||
psql -h "$CI_DB_HOST" -U postgres -d postgres -f packages/db/scripts/setup-ci-roles.sql
|
||||
|
||||
- name: [G-022] Run migrations as migrator (BYPASSRLS)
|
||||
- name: "[G-022] Run migrations as migrator (BYPASSRLS)"
|
||||
run: |
|
||||
DATABASE_URL="$CI_MIGRATOR_DATABASE_URL" pnpm --filter @coreci/db migrate
|
||||
|
||||
- name: [G-022] Build mcp (dist for smoke imports)
|
||||
- name: "[G-022] Build mcp (dist for smoke imports)"
|
||||
run: pnpm --filter @coreci/mcp build
|
||||
|
||||
- name: [G-022] Full M1 + M2 test suite against real Postgres 16
|
||||
- name: "[G-022] Full M1 + M2 test suite against real Postgres 16"
|
||||
# The tests read DB_MODE=pg + DATABASE_URL (coreci_app role, RLS
|
||||
# enforced). The pen test's WITH CHECK assertion (R-009) is REAL here
|
||||
# — a cross-tenant INSERT is rejected by the RLS policy.
|
||||
run: pnpm test
|
||||
|
||||
- name: [G-022] MCP conformance + LLM smoke (Track A only — no PAT in pg job)
|
||||
- name: "[G-022] MCP conformance + LLM smoke (Track A only — no PAT in pg job)"
|
||||
run: pnpm test:conformance
|
||||
|
||||
- name: [G-022] DB pen test (real RLS WITH CHECK enforcement, R-009)
|
||||
- name: "[G-022] DB pen test (real RLS WITH CHECK enforcement, R-009)"
|
||||
run: pnpm --filter @coreci/db test:pen
|
||||
|
||||
- name: Upload coverage artifacts
|
||||
|
||||
Reference in New Issue
Block a user