From 12b12eccd98020edc4d385c9c7f217b50319e13a Mon Sep 17 00:00:00 2001 From: OdevMatheus Date: Mon, 9 Nov 2026 10:45:26 -0300 Subject: [PATCH] ci(workflows): align ai-ci, codeql sast, and governance docs to main Update ai-ci.yml, codeql.yml, release-drafter.yml, feature_request.yml, AGENTS.md, and CONTRIBUTING.md from master to main so CodeQL SAST and the Node.js 20/22 QA matrix trigger on every push and PR targeting main. Closes #188 --- .github/ISSUE_TEMPLATE/feature_request.yml | 2 +- .github/workflows/ai-ci.yml | 4 ++-- .github/workflows/codeql.yml | 4 ++-- .github/workflows/release-drafter.yml | 2 +- AGENTS.md | 2 +- CHANGELOG.md | 3 +++ CONTRIBUTING.md | 2 +- 7 files changed, 11 insertions(+), 8 deletions(-) diff --git a/.github/ISSUE_TEMPLATE/feature_request.yml b/.github/ISSUE_TEMPLATE/feature_request.yml index 6c126f7..55963ee 100644 --- a/.github/ISSUE_TEMPLATE/feature_request.yml +++ b/.github/ISSUE_TEMPLATE/feature_request.yml @@ -7,7 +7,7 @@ body: attributes: value: | > 💡 **Adding a new Skill (`SKILL.md`) or Subagent (`SUBAGENT.md`) to `catalog/`?** - > You do **not** need to open an Issue! Follow [`CONTRIBUTING.md`](https://github.com/OdevMatheus/SkillOps/blob/master/CONTRIBUTING.md) (**Track A**) and open a Pull Request directly. + > You do **not** need to open an Issue! Follow [`CONTRIBUTING.md`](https://github.com/OdevMatheus/SkillOps/blob/main/CONTRIBUTING.md) (**Track A**) and open a Pull Request directly. > > Use this template for **Track B (Core Solution)** changes (`src/`, `.github/`, new AI IDE adapters, or TUI improvements). - type: dropdown diff --git a/.github/workflows/ai-ci.yml b/.github/workflows/ai-ci.yml index a2f2672..fc6528f 100644 --- a/.github/workflows/ai-ci.yml +++ b/.github/workflows/ai-ci.yml @@ -3,10 +3,10 @@ name: SkillOps AI Engine & Catalog CI on: push: branches: - - master + - main pull_request: branches: - - master + - main permissions: contents: read diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 4ff494a..a409b86 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -2,9 +2,9 @@ name: "CodeQL SAST Security Scan" on: push: - branches: ["master"] + branches: ["main"] pull_request: - branches: ["master"] + branches: ["main"] schedule: - cron: "20 3 * * 1" diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml index f761d5a..d9c7822 100644 --- a/.github/workflows/release-drafter.yml +++ b/.github/workflows/release-drafter.yml @@ -3,7 +3,7 @@ name: Release Drafter on: push: branches: - - master + - main pull_request_target: types: [opened, reopened, synchronize, labeled, unlabeled] diff --git a/AGENTS.md b/AGENTS.md index 94d16a7..ad44f73 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -40,7 +40,7 @@ node dist/cli.js eval --catalog catalog --strict ## 3. Agile Governance (`1 Issue = 1 Branch = 1 PR`) 1. **Sprints = GitHub Milestones:** Every Issue and PR must belong to an active Sprint Milestone and carry scope/type Labels (`🐍 core-engine`, `🧠 skill-catalog`, `⚙️ ci`, `📄 docs`, `✨ feat`, `🐛 fix`, etc.). -2. **Branch Protection:** Never commit or push directly to `master`. Use `/` (`feat/...`, `fix/...`, `docs/...`, `ci/...`, `refactor/...`, `test/...`). +2. **Branch Protection:** Never commit or push directly to `main`. Use `/` (`feat/...`, `fix/...`, `docs/...`, `ci/...`, `refactor/...`, `test/...`). 3. **Conventional Commits (`en-US`):** Lowercase imperative (`feat(auditor): ...`, `ci(devops): ...`, `docs(contract): ...`). Update `CHANGELOG.md` (`## [Unreleased]`) for notable changes. --- diff --git a/CHANGELOG.md b/CHANGELOG.md index df04acb..4dfb28f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -18,6 +18,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - **Step 2 TUI Installed Status Indicator (`#171`):** Added `detectExistingTargetsForItem()` in [`src/sync/adapters.ts`](./src/sync/adapters.ts) and target-aware hint formatting in [`src/cli.ts`](./src/cli.ts) and [`src/ui/prompt.ts`](./src/ui/prompt.ts) so Step 2 of `npx skillops-cli add` displays `[installed]` (when present in all selected IDEs) or `[installed: ]` (when present in a subset of selected IDEs). - **`env-secrets-guard` skill (`arch-quality`):** Detects hardcoded credentials, `.env` files tracked by git, and `.env` files missing from `.gitignore` through the stdlib-only [`scan_secrets.py`](./catalog/arch-quality/env-secrets-guard/scripts/scan_secrets.py) (`--json`, exit codes `0`/`1`/`2`, secrets redacted in output). +### Changed +- **CI/CD & CodeQL Default Branch Alignment (`#188`):** Updated [`.github/workflows/ai-ci.yml`](./.github/workflows/ai-ci.yml), [`.github/workflows/codeql.yml`](./.github/workflows/codeql.yml), [`.github/workflows/release-drafter.yml`](./.github/workflows/release-drafter.yml), [`.github/ISSUE_TEMPLATE/feature_request.yml`](./.github/ISSUE_TEMPLATE/feature_request.yml), [`AGENTS.md`](./AGENTS.md), and [`CONTRIBUTING.md`](./CONTRIBUTING.md) to trigger and reference `main` instead of `master`. + ### Removed - **Outdated `docs/BENCHMARKS.md` (`#179`):** Removed legacy `v1.0.0` benchmark document referencing removed CLI commands (`tokens`, `audit`, `eval`) and retired catalog entries, and dropped `"docs/BENCHMARKS.md"` from `package.json` `files`. diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 5bf9fad..7696f94 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -79,7 +79,7 @@ npm test If you want to fix a bug, improve the TUI design, update a runtime adapter in `src/sync/`, or propose an architectural change: 1. **Open a GitHub Issue first** describing the problem, motivation, and proposed change. -2. **Create a branch from `master`** following the required naming pattern (`1 Issue = 1 Branch = 1 PR` for core changes). +2. **Create a branch from `main`** following the required naming pattern (`1 Issue = 1 Branch = 1 PR` for core changes). 3. **Run the full verification suite locally:** ```bash npm run lint