Jon Chery
d5bae868a4
core/env.py dual-read helper (D-108); 21 ACDL_*→NOVA_* env vars migrated across core/scripts/adapters/tests/workflows + .env/.env.secrets (key rename, values stay). G-106 binding: run_platform.sh:288-289 + regression_verify.py:309-312 dual-read (NOVA first, ACDL fallback). G-108 binding: Gitea NOVA_* secrets created via API + workflow secrets: refs updated (deploy.yml + modules-lifecycle.yml, .gitea + .github). acdl_tagging.py→nova_tagging.py (D-109 warn mode, nova:* enforced). .acdl/→.nova/ consumer path (resolver + deploy workflow + schema + tests + docs). Test fixtures updated; pytest + run_ci.sh PASS. ---ci--- project: acdl phase: 2 milestone: v1.15 status: execute ---/ci---
71 lines
2.1 KiB
Bash
Executable File
71 lines
2.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# scripts/run_ci.sh - reproduce the CI pipeline locally.
|
|
#
|
|
# Mirrors the central pipeline contract (pipelines/ci.yml) which both
|
|
# .gitea/workflows/ci.yml (Gitea Actions, dev) and
|
|
# .github/workflows/ci.yml (GitHub Actions, production) implement.
|
|
#
|
|
# Runs the same three stages in the same order:
|
|
# 1. lint — py_compile all Python files
|
|
# 2. test — pytest test suite (offline)
|
|
# 3. check-only — run_platform.sh --check-only (offline, no AWS)
|
|
#
|
|
# Fails on the first stage that errors. Exits 0 with "CI PIPELINE OK"
|
|
# when all stages pass.
|
|
#
|
|
# Usage:
|
|
# bash scripts/run_ci.sh # run all stages
|
|
# bash scripts/run_ci.sh --quiet # suppress per-stage banners
|
|
set -euo pipefail
|
|
ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
cd "$ROOT"
|
|
|
|
QUIET=0
|
|
for arg in "$@"; do
|
|
case "$arg" in
|
|
--quiet) QUIET=1 ;;
|
|
*) echo "FAIL: unknown argument: $arg" >&2; exit 1 ;;
|
|
esac
|
|
done
|
|
|
|
banner() {
|
|
[ "$QUIET" = "1" ] || echo ""
|
|
echo "── $1 ──"
|
|
[ "$QUIET" = "1" ] || echo ""
|
|
}
|
|
|
|
fail() { echo "FAIL: $*" >&2; exit 1; }
|
|
|
|
echo "=== ACDL CI Pipeline (local reproduction) ==="
|
|
echo "contract: pipelines/ci.yml (3 stages)"
|
|
echo ""
|
|
|
|
banner "Stage 1/3: lint (py_compile)"
|
|
python3 -m py_compile \
|
|
core/confidence_signal.py \
|
|
core/outbox_writer.py \
|
|
core/output_publisher.py \
|
|
core/env.py \
|
|
core/contract_resolver.py \
|
|
core/lambda/contract_ingestor.py \
|
|
adapters/terraform/adapter.py \
|
|
adapters/terraform/policy/checkov_adapter.py \
|
|
adapters/terraform/policy/custom_rules/nova_tagging.py \
|
|
adapters/wiz/wiz_adapter.py \
|
|
adapters/kyverno/kyverno_adapter.py \
|
|
scripts/push_consumer_image.py \
|
|
|| fail "lint: py_compile failed"
|
|
echo "lint: OK"
|
|
|
|
banner "Stage 2/3: test (pytest)"
|
|
python3 -m pytest tests/ -v --tb=short -m "not slow" || fail "test: pytest failed"
|
|
echo "test: OK"
|
|
|
|
banner "Stage 3/3: check-only (run_platform.sh --check-only)"
|
|
bash scripts/run_platform.sh --check-only || fail "check-only: run_platform.sh failed"
|
|
echo "check-only: OK"
|
|
|
|
echo ""
|
|
echo "=== CI PIPELINE OK ==="
|
|
echo "3 stages passed: lint, test, check-only"
|
|
exit 0 |