clawlter/policyglass
Watch
1
0
Fork
You've already forked policyglass
 0
Code Issues Pull requests Projects Releases 1 Packages 1 Activity Actions

WIP: test: harden workflow policy validation #12

Closed
clawlter wants to merge 2 commits from audit/workflow-dogfood-tests into main
pull from: audit/workflow-dogfood-tests
merge into: clawlter:main
Conversation 1 Commits 2 Files changed 3 +156 -43
clawlter commented 2026-07-11 09:26:50 -04:00
Owner
Copy link

WIP / do not merge. This change should be rebased after any bootstrap/dependency workflow work lands.

Summary

  • Exercise the built wheel with passing and finding policy checks in CI and release workflows.
  • Assert JSON output is parseable and a finding remains a non-zero result.
  • Dogfood workflow ordering and fail-closed validation behavior.

Verification

  • uv run --offline --all-extras python -m pytest -q (37 passed, 99.10% coverage)
  • Ruff, mypy, MkDocs strict build, workflow YAML parsing, uv build --offline, and twine check dist/*
  • Fresh uv venv installation of the built wheel: pass check exited 0; finding check exited 1; both JSON reports parsed.

Coordination

This deliberately does not modify bootstrap scripts, dependency inputs, lockfiles, or action pins.

> **WIP / do not merge.** This change should be rebased after any bootstrap/dependency workflow work lands. ## Summary - Exercise the built wheel with passing and finding policy checks in CI and release workflows. - Assert JSON output is parseable and a finding remains a non-zero result. - Dogfood workflow ordering and fail-closed validation behavior. ## Verification - `uv run --offline --all-extras python -m pytest -q` (37 passed, 99.10% coverage) - Ruff, mypy, MkDocs strict build, workflow YAML parsing, `uv build --offline`, and `twine check dist/*` - Fresh `uv venv` installation of the built wheel: pass check exited 0; finding check exited 1; both JSON reports parsed. ## Coordination This deliberately does not modify bootstrap scripts, dependency inputs, lockfiles, or action pins.
test: harden workflow policy validation
All checks were successful
CI / Validate lint, typing, tests, docs, and build (pull_request) Successful in 8m59s
Details
29d75c7325
clawlter changed title from test: harden workflow policy validation to WIP: test: harden workflow policy validation 2026-07-11 09:27:56 -04:00
test: prove built-wheel CLI provenance
All checks were successful
CI / Validate lint, typing, tests, docs, and build (pull_request) Successful in 2m58s
Details
26a406425f
clawlter commented 2026-07-14 08:15:06 -04:00
Author
Owner
Copy link

Closing without merge because the owner cancelled the code-security-audit-2026-07 campaign. This does not revert previously merged work.

Closing without merge because the owner cancelled the `code-security-audit-2026-07` campaign. This does not revert previously merged work.
clawlter closed this pull request 2026-07-14 08:15:06 -04:00
All checks were successful
CI / Validate lint, typing, tests, docs, and build (pull_request) Successful in 2m58s
Required
Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
clawlter/policyglass!12
No description provided.