From 5f48bd66a358288b4fda2e91b1cd02653f05c493 Mon Sep 17 00:00:00 2001
From: nbrieussel <nicolas.brieussel@gmail.com>
Date: Sun, 22 Mar 2026 14:16:20 +0100
Subject: [PATCH 1/4] chore: setup GitHub Copilot configuration and project
 conventions

- Add copilot-instructions.md with project guidelines
- Add CONTRIBUTING.md with branch, commit, and PR conventions
- Add hooks for automatic mise install on mise.toml changes
- Update README.md with onboarding instructions
- Add terraform 1.9 to mise.toml dependencies
---
 .github/copilot-instructions.md     |  77 +++++++++++++++++++
 .github/hooks/check-mise-changes.sh |  10 +++
 .github/hooks/mise-watcher.json     |  11 +++
 .vscode/settings.json               |   6 ++
 CONTRIBUTING.md                     | 114 ++++++++++++++++++++++++++++
 README.md                           |  12 ++-
 mise.toml                           |  20 +++++
 7 files changed, 249 insertions(+), 1 deletion(-)
 create mode 100644 .github/copilot-instructions.md
 create mode 100644 .github/hooks/check-mise-changes.sh
 create mode 100644 .github/hooks/mise-watcher.json
 create mode 100644 .vscode/settings.json
 create mode 100644 CONTRIBUTING.md
 create mode 100644 mise.toml

diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md
new file mode 100644
index 0000000..3086a1d
--- /dev/null
+++ b/.github/copilot-instructions.md
@@ -0,0 +1,77 @@
+---
+name: "IntegratedDynamic Infrastructure - Configuration"
+description: "Conventions de projet et préférences de codage pour l'infrastructure"
+---
+
+# Instructions pour GitHub Copilot
+
+## Onboarding
+
+### Gestion des dépendances
+
+Les dépendances du projet sont gérées via **mise**.
+
+**Installation** :
+```bash
+mise install
+```
+
+ℹ️ **Automatique** : Une fois `mise.toml` modifié, `mise install` se lance automatiquement via un hook.
+
+## Conventions de code
+
+### Branches
+
+Je dois TOUJOURS utiliser [Conventional Branch](https://conventional-branch.github.io/).
+
+Format strict:
+```
+<type>/<description>
+```
+
+Types: `feature/`, `bugfix/`, `hotfix/`, `ci/`, `chore/`
+
+Exemples:
+- `feature/add-authentication-middleware`
+- `bugfix/fix-memory-leak`
+- `ci/add-github-actions-workflow`
+
+Règles obligatoires:
+- Minuscules, chiffres, hyphens et dots uniquement
+- Pas de hyphens/dots consécutifs ou aux extrémités
+- Inclure ticket number si applicable: `feature/issue-456-add-auth`
+
+### Commits
+
+Utiliser [Conventional Commits](https://www.conventionalcommits.org/) :
+```
+<type>[scope]: <description>
+```
+
+Types : `feat`, `fix`, `docs`, `style`, `refactor`, `perf`, `test`, `chore`
+
+### Pull Requests
+
+**Titre** : Doit être descriptif et clair. Format recommandé avec type et description.
+```
+<type>: Clear description of what the PR does
+```
+
+**Body** : Contexte, changements, issues liées (via `Closes #123`), et instructions de test.
+
+Utiliser [Conventional Comments](https://conventionalcomments.org/) pour les reviews :
+```
+<label> [decorations]: <subject>
+```
+
+Labels : `praise`, `nitpick`, `suggestion`, `issue`, `todo`, `question`, `thought`
+
+Voir [CONTRIBUTING.md](../CONTRIBUTING.md) pour plus de détails.
+
+## Structure du projet
+
+## Technologies et frameworks
+
+## Pratiques de développement
+
+## Points importants à retenir
diff --git a/.github/hooks/check-mise-changes.sh b/.github/hooks/check-mise-changes.sh
new file mode 100644
index 0000000..29c7dbf
--- /dev/null
+++ b/.github/hooks/check-mise-changes.sh
@@ -0,0 +1,10 @@
+#!/bin/bash
+
+# Lire le JSON du hook sur stdin
+input=$(cat)
+
+# Vérifier si mise.toml a été modifié via create_file ou replace_string_in_file
+if echo "$input" | grep -q "mise.toml"; then
+    # Auto-run mise install
+    mise install
+fi
diff --git a/.github/hooks/mise-watcher.json b/.github/hooks/mise-watcher.json
new file mode 100644
index 0000000..670d6cf
--- /dev/null
+++ b/.github/hooks/mise-watcher.json
@@ -0,0 +1,11 @@
+{
+  "hooks": {
+    "PostToolUse": [
+      {
+        "type": "command",
+        "command": "./.github/hooks/check-mise-changes.sh",
+        "timeout": 30
+      }
+    ]
+  }
+}
diff --git a/.vscode/settings.json b/.vscode/settings.json
new file mode 100644
index 0000000..c9f057b
--- /dev/null
+++ b/.vscode/settings.json
@@ -0,0 +1,6 @@
+{
+    "chat.tools.terminal.autoApprove": {
+        "git add": true,
+        "git commit": true
+    }
+}
\ No newline at end of file
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
new file mode 100644
index 0000000..ca4fbc7
--- /dev/null
+++ b/CONTRIBUTING.md
@@ -0,0 +1,114 @@
+# Contribuer
+
+## Branches : Conventional Branch
+
+Nous recommandons [Conventional Branch](https://conventional-branch.github.io/) pour les noms de branches.
+
+Format:
+```
+<type>/<description>
+```
+
+### Types de branches
+- `feature/` ou `feat/` : Nouvelle fonctionnalité (ex: `feature/add-login-page`)
+- `bugfix/` ou `fix/` : Correction de bug (ex: `bugfix/fix-header-layout`)
+- `hotfix/` : Correction urgente (ex: `hotfix/security-patch`)
+- `ci/` : Changements CI/CD uniquement (ex: `ci/add-github-actions-workflow`)
+- `chore/` : Tâches sans rapport au code (ex: `chore/update-dependencies`)
+
+### Règles
+- Utiliser uniquement des minuscules, chiffres, hyphens et dots
+- Pas de hyphens/dots consécutifs, au début ou à la fin
+- Clair et concis
+- Optionnel : inclure le numéro de ticket (ex: `feature/issue-123-add-login`)
+
+**Note** : Les humains ne sont pas strictement limités à cette convention, mais c'est fortement recommandé.
+
+## Commits : Conventional Commits
+
+Nous utilisons [Conventional Commits](https://www.conventionalcommits.org/) pour nos messages de commit.
+
+Format:
+```
+<type>[optional scope]: <description>
+
+[optional body]
+
+[optional footer(s)]
+```
+
+### Types
+- `feat` : Une nouvelle fonctionnalité
+- `fix` : Un correctif de bug
+- `docs` : Changements de documentation
+- `style` : Changements de style (formatage, points-virgules, etc.)
+- `refactor` : Refactoring du code sans ajouter de feature ni corriger de bug
+- `perf` : Amélioration des performances
+- `test` : Ajout ou modification de tests
+- `chore` : Changements de la build, dépendances, outils
+- `ci` : Un changement sur la CI/CD
+
+### Exemples
+```
+feat(api): add new endpoint for user authentication
+fix: resolve memory leak in connection pool
+docs: update README with installation instructions
+```
+
+## Pull Requests
+
+### Titre de la PR
+
+Le titre doit être descriptif et clair. Il peut être basé sur le nom de la branche, mais doit inclure un contexte:
+
+Format recommandé:
+```
+[Type] Feature/Fix name (branch-name)
+```
+
+Ou simplement:
+```
+<type>: Clear description of what the PR does
+```
+
+Exemples valides:
+```
+feat: Add authentication middleware to API routes
+fix: Resolve memory leak in connection pool
+docs: Update deployment guide with new variables
+```
+
+### Body de la PR
+
+Le body doit contenir:
+- **Contexte** : Pourquoi cette PR est nécessaire
+- **Changements** : Quoi a changé
+- **Issues liées** : Référencer les issues fermées avec `Closes #123`
+- **Tests** : Comment tester les changements
+
+Exemple:
+```
+## Contexte
+We needed to add rate limiting to prevent abuse of the API.
+
+## Changements
+- Added rate limiter middleware
+- Configured limits per endpoint
+- Added metrics tracking
+
+## Issues liées
+Closes #456
+
+## Tests
+- Run `npm run test:api` to verify endpoints
+- Manual testing with more than 100 requests per minute should return 429
+```
+
+### Reviews et Conventional Comments
+
+Utiliser [Conventional Comments](https://conventionalcomments.org/) pour les reviews :
+```
+<label> [decorations]: <subject>
+```
+
+Labels : `praise`, `nitpick`, `suggestion`, `issue`, `todo`, `question`, `thought`
diff --git a/README.md b/README.md
index 70158c5..26ac642 100644
--- a/README.md
+++ b/README.md
@@ -1 +1,11 @@
-# infrastructure
\ No newline at end of file
+# Infrastructure
+
+## Onboarding
+
+### Installation des dépendances
+
+```bash
+mise install
+```
+
+Cette commande installe toutes les dépendances du projet définies dans `mise.toml`.
\ No newline at end of file
diff --git a/mise.toml b/mise.toml
new file mode 100644
index 0000000..7a5d425
--- /dev/null
+++ b/mise.toml
@@ -0,0 +1,20 @@
+[tools]
+kubectl = "1.35"
+minikube = "1.38"
+terraform = "1.14"
+
+[tasks.minikube]
+run = """
+minikube start --driver=docker
+kubectl wait --for=condition=Ready nodes --all --timeout=120s
+"""
+
+[tasks.terraform-init]
+run = "echo terraform init"
+
+[tasks.terraform-apply]
+run = "echo terraform apply -auto-approve"
+
+[tasks.dev]
+description = "Full dev environment"
+depends = ["minikube", "terraform-init", "terraform-apply"]
\ No newline at end of file

From 4055ea2e8c875a27daeac7d1835b21c00a77ae2f Mon Sep 17 00:00:00 2001
From: nbrieussel <nicolas.brieussel@gmail.com>
Date: Sun, 22 Mar 2026 14:23:06 +0100
Subject: [PATCH 2/4] docs: document automatic PR creation behavior for copilot
 agent

---
 .github/copilot-instructions.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md
index 3086a1d..c3ea3d9 100644
--- a/.github/copilot-instructions.md
+++ b/.github/copilot-instructions.md
@@ -59,6 +59,8 @@ Types : `feat`, `fix`, `docs`, `style`, `refactor`, `perf`, `test`, `chore`
 
 **Body** : Contexte, changements, issues liées (via `Closes #123`), et instructions de test.
 
+**Comportement automatique** : Après chaque `commit` + `push` sur une branche, créer automatiquement une PR en **draft** (si elle n'existe pas déjà) avec titre et body appropriés.
+
 Utiliser [Conventional Comments](https://conventionalcomments.org/) pour les reviews :
 ```
 <label> [decorations]: <subject>

From 12874ebb3ecdbc343757a993bf5d4f591142b6d7 Mon Sep 17 00:00:00 2001
From: nbrieussel <nicolas.brieussel@gmail.com>
Date: Sun, 22 Mar 2026 14:25:29 +0100
Subject: [PATCH 3/4] chore: add VS Code workspace settings for chat tool
 auto-approval

---
 .vscode/settings.json | 6 ++++--
 mise.toml             | 2 +-
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/.vscode/settings.json b/.vscode/settings.json
index c9f057b..98dbaf7 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -1,6 +1,8 @@
 {
     "chat.tools.terminal.autoApprove": {
         "git add": true,
-        "git commit": true
+        "git commit": true,
+        "gh": true,
+        "git push": true
     }
-}
\ No newline at end of file
+}
diff --git a/mise.toml b/mise.toml
index 7a5d425..39ed545 100644
--- a/mise.toml
+++ b/mise.toml
@@ -17,4 +17,4 @@ run = "echo terraform apply -auto-approve"
 
 [tasks.dev]
 description = "Full dev environment"
-depends = ["minikube", "terraform-init", "terraform-apply"]
\ No newline at end of file
+depends = ["minikube", "terraform-init", "terraform-apply"]

From bb2fa8016916ea2e7cf52107d93869eb3a309dcc Mon Sep 17 00:00:00 2001
From: nbrieussel <nicolas.brieussel@gmail.com>
Date: Sun, 22 Mar 2026 14:35:32 +0100
Subject: [PATCH 4/4] ci: add GitHub Actions workflow linting with actionlint

- Add actionlint 1.7 to mise.toml
- Create ci workflow to lint all GitHub Actions workflows
- Runs on push and PR to workflow files
- Ensures workflow syntax and best practices compliance
---
 .githooks/install.sh                 | 12 ++++++++++++
 .githooks/pre-push                   | 26 ++++++++++++++++++++++++++
 .github/workflows/lint-workflows.yml | 18 ++++++++++++++++++
 README.md                            | 10 +++++++++-
 mise.toml                            |  1 +
 5 files changed, 66 insertions(+), 1 deletion(-)
 create mode 100755 .githooks/install.sh
 create mode 100755 .githooks/pre-push
 create mode 100644 .github/workflows/lint-workflows.yml

diff --git a/.githooks/install.sh b/.githooks/install.sh
new file mode 100755
index 0000000..34a00ca
--- /dev/null
+++ b/.githooks/install.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+# Install git hooks
+
+echo "📦 Installing git hooks..."
+
+# Make hooks executable
+chmod +x .githooks/pre-push
+
+# Configure git to use our hooks directory
+git config core.hooksPath .githooks
+
+echo "✅ Git hooks installed successfully!"
diff --git a/.githooks/pre-push b/.githooks/pre-push
new file mode 100755
index 0000000..32c2749
--- /dev/null
+++ b/.githooks/pre-push
@@ -0,0 +1,26 @@
+#!/bin/bash
+# Pre-push hook: Lint GitHub Actions workflows before pushing
+
+set -e
+
+# Get the list of changed workflow files
+changed_workflows=$(git diff --cached --name-only --diff-filter=ACM | grep -E '\.github/workflows/.*\.ya?ml$' || true)
+
+if [ -n "$changed_workflows" ]; then
+    echo "🔍 Linting GitHub Actions workflows..."
+    
+    if ! command -v actionlint &> /dev/null; then
+        echo "⚠️  actionlint not found. Installing via mise..."
+        mise install actionlint
+    fi
+    
+    # Lint the changed workflows
+    if actionlint -oneline $changed_workflows; then
+        echo "✅ Workflows lint passed!"
+    else
+        echo "❌ Workflow lint failed. Fix the errors above and try again."
+        exit 1
+    fi
+else
+    echo "✅ No workflow changes detected."
+fi
diff --git a/.github/workflows/lint-workflows.yml b/.github/workflows/lint-workflows.yml
new file mode 100644
index 0000000..e945cea
--- /dev/null
+++ b/.github/workflows/lint-workflows.yml
@@ -0,0 +1,18 @@
+name: Lint GitHub Actions Workflows
+
+on:
+  push:
+    paths:
+      - '.github/workflows/**'
+  pull_request:
+    paths:
+      - '.github/workflows/**'
+
+jobs:
+  actionlint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      
+      - name: Run actionlint
+        uses: raven-actions/actionlint@v2
diff --git a/README.md b/README.md
index 26ac642..c982f54 100644
--- a/README.md
+++ b/README.md
@@ -8,4 +8,12 @@
 mise install
 ```
 
-Cette commande installe toutes les dépendances du projet définies dans `mise.toml`.
\ No newline at end of file
+Cette commande installe toutes les dépendances du projet définies dans `mise.toml`.
+
+### Installation des Git Hooks
+
+```bash
+.githooks/install.sh
+```
+
+Cela configure les git hooks locaux pour automatiser les vérifications avant les commits/pushes.
\ No newline at end of file
diff --git a/mise.toml b/mise.toml
index 39ed545..68c92e5 100644
--- a/mise.toml
+++ b/mise.toml
@@ -2,6 +2,7 @@
 kubectl = "1.35"
 minikube = "1.38"
 terraform = "1.14"
+actionlint = "1.7"
 
 [tasks.minikube]
 run = """