fix(ci): quote the 7 step names that start with "[" so the gate file is valid YAML (coreci-chat#1)
ci / test-pglite (PGlite, default) (push) Failing after 10s
ci / test-postgres (Postgres 16, G-022 RLS) (push) Failing after 21s
ci / test-pglite (PGlite, default) (pull_request) Failing after 10s
ci / test-postgres (Postgres 16, G-022 RLS) (pull_request) Failing after 21s

This commit is contained in:
2026-10-27 03:59:15 +00:00
parent 3178d4ed55
commit cc5577fe3d
+7 -7
View File
@@ -87,7 +87,7 @@ jobs:
- name: Build (mcp package — dist for the smoke imports)
run: pnpm --filter @coreci/mcp build
- name: [G-018,R-008] Import guard (no @coreci/llm-mock in prod source)
- name: "[G-018,R-008] Import guard (no @coreci/llm-mock in prod source)"
run: pnpm check:llm-mock-guard
- name: Unit + integration tests (PGlite)
@@ -193,27 +193,27 @@ jobs:
echo "DATABASE_URL=postgres://coreci_app:coreci_app_ci@$HOST:5432/coreci_ci" >> "$GITHUB_ENV"
echo "CI_MIGRATOR_DATABASE_URL=postgres://migrator:migrator_ci@$HOST:5432/coreci_ci" >> "$GITHUB_ENV"
- name: [R-009] Setup CI roles (coreci_app NOBYPASSRLS, migrator BYPASSRLS)
- name: "[R-009] Setup CI roles (coreci_app NOBYPASSRLS, migrator BYPASSRLS)"
run: |
psql -h "$CI_DB_HOST" -U postgres -d postgres -f packages/db/scripts/setup-ci-roles.sql
- name: [G-022] Run migrations as migrator (BYPASSRLS)
- name: "[G-022] Run migrations as migrator (BYPASSRLS)"
run: |
DATABASE_URL="$CI_MIGRATOR_DATABASE_URL" pnpm --filter @coreci/db migrate
- name: [G-022] Build mcp (dist for smoke imports)
- name: "[G-022] Build mcp (dist for smoke imports)"
run: pnpm --filter @coreci/mcp build
- name: [G-022] Full M1 + M2 test suite against real Postgres 16
- name: "[G-022] Full M1 + M2 test suite against real Postgres 16"
# The tests read DB_MODE=pg + DATABASE_URL (coreci_app role, RLS
# enforced). The pen test's WITH CHECK assertion (R-009) is REAL here
# — a cross-tenant INSERT is rejected by the RLS policy.
run: pnpm test
- name: [G-022] MCP conformance + LLM smoke (Track A only — no PAT in pg job)
- name: "[G-022] MCP conformance + LLM smoke (Track A only — no PAT in pg job)"
run: pnpm test:conformance
- name: [G-022] DB pen test (real RLS WITH CHECK enforcement, R-009)
- name: "[G-022] DB pen test (real RLS WITH CHECK enforcement, R-009)"
run: pnpm --filter @coreci/db test:pen
- name: Upload coverage artifacts