Skip to content

fix: replace standalone SBOM with reusable quality workflow - #42

Closed
rubenvdlinde wants to merge 6 commits into
developmentfrom
fix/sbom-reusable-workflow
Closed

fix: replace standalone SBOM with reusable quality workflow#42
rubenvdlinde wants to merge 6 commits into
developmentfrom
fix/sbom-reusable-workflow

Conversation

@rubenvdlinde

@rubenvdlinde rubenvdlinde commented Mar 17, 2026

Copy link
Copy Markdown
Contributor

Summary

This PR consolidates the CI quality workflows into a single reusable workflow caller:

  • Replaced standalone code-quality.yml (71 lines of custom PHP checks + frontend linting) with a call to the shared ConductionNL/.github reusable quality workflow
  • Deleted standalone sbom.yml — its functionality (enable-sbom: true) is now included in the consolidated code-quality.yml
  • Result: One workflow file (code-quality.yml) that calls ConductionNL/.github/.github/workflows/quality.yml@main with enable-sbom: true and enable-frontend: true, covering both push and PR triggers
  • Version bump to 0.0.33 (automated)

Note: This branch was based on main after merge of #38, so the diff against development includes many unrelated file changes from the divergence between main and development. The only intentional changes are to the workflow files and the version bump.

Commits

  • a48088a Merge pull request chore: Merge development into main #38 from ConductionNL/development
  • c293e40 Bump version to 0.0.33 [skip ci]
  • 3928c27 fix: replace standalone SBOM workflow with reusable quality workflow
  • acf4e8f fix: Resolve merge conflicts with development branch
  • 3c8751e fix: consolidate quality workflows into single reusable workflow

Related

Test plan

  • Verify SBOM is generated on push to main and development
  • Verify quality checks run on pull requests to main and development
  • Verify no more standalone SBOM or quality workflows running separately
  • Verify no "chore: update SBOM" commits on feature branches

@rubenvdlinde
rubenvdlinde changed the base branch from main to development March 17, 2026 08:22
Take version from development (0.0.34-unstable.8) and keep the
reusable SBOM workflow from this branch.
Replace standalone code-quality.yml and sbom.yml with a single
reusable workflow caller from ConductionNL/.github that handles
PHP quality checks, frontend linting, and SBOM generation.
@github-actions

Copy link
Copy Markdown
Contributor

Quality Report

Repository ConductionNL/docudesk
Commit b62891d
Branch 42/merge
Event pull_request
Generated 2026-03-17 08:39 UTC
Workflow Run https://github.com/ConductionNL/docudesk/actions/runs/23185522403

Summary

Group Result
PHP Quality FAIL
Vue Quality FAIL
Security FAIL
License FAIL
PHPUnit SKIP
Newman SKIP

PHP Quality

Tool Result
lint FAIL
phpcs FAIL
phpmd FAIL
psalm FAIL
phpstan FAIL
phpmetrics FAIL

Vue Quality

Tool Result
eslint FAIL
stylelint PASS

Security

Ecosystem Result
composer FAIL
npm PASS

License Compliance

Ecosystem Result
composer FAIL
npm PASS

npm dependencies (324 total)

Metric Count
Approved (allowlist) 323
Approved (override) 1
Denied 0

PHPUnit Tests

PHPUnit tests were not enabled for this run.

Integration Tests (Newman)

Newman integration tests were not enabled for this run.


Generated automatically by the Quality workflow.

Download the full PDF report from the workflow artifacts.

@rubenvdlinde

Copy link
Copy Markdown
Contributor Author

Closing — superseded by newer work or stale.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants