ci: Woodpecker validation lane replaces the GitHub Actions validate workflow #42

Merged

piers merged 1 commit from ci/woodpecker-validation into main

2026-10-01 22:45:52 +00:00

svc-agent-writer commented

2026-10-01 22:40:18 +00:00

Collaborator

Woodpecker port of .github/workflows/validate.yml (Track B Tier 2 batch 4, standard shape). Steps: npm ci, forge context, pack manifests, security scan, script tests, strict catalog build; node image is the estate pin from Stallari/mcp-helpers-ts. The stallari-secops-scanner git dependency resolves anonymously from Stallari/secops-scanner (public) through a git URL rewrite; the lockfile commit pin is unchanged. The catalog-updated dispatch had no consumer and retires with the workflow file. PR pack validation and the security comment now arrive from the registry worker Forgejo webhook (registry-infra #52).

Gate: three green push runs and three green PR runs, then enable_status_check:true with ci/woodpecker/pr/validation. Merge is an operator act.

Woodpecker port of `.github/workflows/validate.yml` (Track B Tier 2 batch 4, standard shape). Steps: `npm ci`, forge context, pack manifests, security scan, script tests, strict catalog build; node image is the estate pin from `Stallari/mcp-helpers-ts`. The `stallari-secops-scanner` git dependency resolves anonymously from `Stallari/secops-scanner` (public) through a git URL rewrite; the lockfile commit pin is unchanged. The `catalog-updated` dispatch had no consumer and retires with the workflow file. PR pack validation and the security comment now arrive from the registry worker Forgejo webhook (registry-infra #52). Gate: three green push runs and three green PR runs, then `enable_status_check:true` with `ci/woodpecker/pr/validation`. Merge is an operator act.

svc-agent-writer added 1 commit

2026-10-01 22:40:18 +00:00

ci: Woodpecker validation lane replaces the GitHub Actions validate workflow

ci/woodpecker/pr/validation Pipeline was successful

Details

b41dbb5a64

Track B Tier 2 batch 4: the repository moved to git.groupthink.asia on
2026-10-02, so the pull-request half of `.github/workflows/validate.yml`
stopped. This lane is its Woodpecker port on the meridian Linux runners:
install, forge context, pack manifests, security scan, script tests and
a strict catalog build, on the estate node:22 image pin. The dead
`catalog-updated` dispatch retires with the workflow file.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

svc-agent-writer referenced this pull request

2026-10-01 22:41:32 +00:00

Woodpecker port of validate.yml after the Forgejo move #43