13 CI CD

13. CI/CD Pipeline & GitHub Actions Workflows

Overview of continuous integration pipelines, automated quality gates, and GitHub Actions workflows.

---

🤖 GitHub Actions Workflow Architecture

PACT OS employs automated GitHub Actions workflows in .github/workflows/ to enforce code quality, dependency health, and contributor experience:

graph TD
    PR[Pull Request Opened / Updated] --> Gate[Quality Gates Workflow]
    Gate --> TypeScript[tsc --noEmit]
    Gate --> ESLint[eslint src/]
    Gate --> UnitTests[npm test 56/56 Suites]
    Gate --> LinkAudit[scratch/check-links.mjs]
    Gate --> SecretScan[scratch/secret-scan.mjs]

    PR --> Security[Dependency Audit Workflow]
    Security --> Audit[npm audit --audit-level=high]

Loading

---

📋 Active Workflows Overview

Workflow	File	Trigger	Responsibility
Continuous Integration	.github/workflows/main.yml	push, pull_request	Runs TypeScript, ESLint, 56 domain test suites, Next.js build
PR Verification	.github/workflows/pr-check.yml	pull_request	Runs strict quality gates and link audits on incoming PRs
Dependency Audit	.github/workflows/security.yml	schedule, workflow_dispatch	Audits dependencies for high/critical security vulnerabilities
Welcome Workflow	.github/workflows/pr-welcome.yml	pull_request_target	Greets first-time contributors with helpful guidance

---

🛡️ Protected Branch Requirements

The main branch requires the following status checks to pass before merging:

1. Continuous Integration / Quality Gates & Verification (20.x)
2. Dependency Security Audit / Dependency Health & Vulnerability Scan (20.x)
3. At least 1 approving code owner review (.github/CODEOWNERS).