OneFineStarstuff.github.io/.github/workflows/governance-artifacts-ci.yml at c9c07c44d101b4430478e6dbda653d166831a124 · OneFineStarstuff/OneFineStarstuff.github.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
name: Governance Artifacts CI

on:
  pull_request:
    paths:
      - 'docs/schemas/**'
      - 'docs/reports/ENTERPRISE_CIVILIZATIONAL_AGI_ASI_BLUEPRINT_2026_2030.md'
      - 'G_STACK_GOVERNANCE_BLUEPRINT_2026_2030.md'
      - 'docs/reports/G_STACK_GOVERNANCE_BLUEPRINT_2026_2030.md'
      - 'gstack_artifacts/**'
      - 'tests/test_validate_artifacts.py'
      - 'tests/__init__.py'
      - '.github/workflows/governance-artifacts-ci.yml'
      - 'Makefile'
      - '.yamllint'
  push:
    branches: [main, master]
    paths:
      - 'docs/schemas/**'
      - 'docs/reports/ENTERPRISE_CIVILIZATIONAL_AGI_ASI_BLUEPRINT_2026_2030.md'
      - 'G_STACK_GOVERNANCE_BLUEPRINT_2026_2030.md'
      - 'docs/reports/G_STACK_GOVERNANCE_BLUEPRINT_2026_2030.md'
      - 'gstack_artifacts/**'
      - 'tests/test_validate_artifacts.py'
      - 'tests/__init__.py'
      - '.github/workflows/governance-artifacts-ci.yml'
      - 'Makefile'
      - '.yamllint'

jobs:
  validate-existing-governance-stack:
    runs-on: ubuntu-latest
    timeout-minutes: 12
    steps:
      - name: Checkout
        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5

      - name: Set up Python
        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
        with:
          python-version: '3.12'
          cache: 'pip'
          cache-dependency-path: docs/schemas/requirements-governance.txt

      - name: Install governance schema dependencies
        run: |
          python -m pip install --upgrade pip
          pip install -r docs/schemas/requirements-governance.txt

      - name: Validate governance YAML/JSON artifacts
        run: make governance-validate

      - name: Setup OPA
        uses: open-policy-agent/setup-opa@34a30e8a924d1b03ce2cf7abe97250bbb1f332b5
        with:
          version: v1.15.2

      - name: Rego format and tests
        run: make governance-policy-test

      - name: Validator and evidence bundle unit tests
        run: make governance-validator-test

      - name: Build and verify evidence artifacts
        run: |
          make governance-evidence-manifest
          make governance-evidence-verify
          make governance-evidence-schema
          make governance-report
          make governance-report-schema
          make governance-check-generated

  validate-gstack-artifacts:
    runs-on: ubuntu-latest
    timeout-minutes: 8
    steps:
      - name: Checkout
        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5

      - name: Setup Python
        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
        with:
          python-version: '3.12'
          cache: 'pip'
          cache-dependency-path: requirements-dev.txt

      - name: Run G-Stack CI composite target
        run: make gstack-ci

      - name: Upload G-Stack test artifacts
        if: always()
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
        with:
          name: gstack-test-results
          path: artifacts/test-results
          if-no-files-found: ignore

      - name: Upload G-Stack validation report
        if: always()
        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
        with:
          name: gstack-validation-report
          path: artifacts/validation/gstack-validation.json
          if-no-files-found: warn