9 Commits

Author SHA1 Message Date
root
664a4f1f12 feat: add PR template (Phase 8.2)
Some checks failed
0/0 projects applied successfully.
AI Review / AI Code Review (pull_request) Successful in 3s
PR Checks / OpenTofu Validate & Policy (pull_request) Failing after 12s
Security Scan / Security Scan (pull_request) Successful in 9s
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-14 19:06:05 +01:00
root
664ca36641 feat: add AI code review workflow (Phase 8.1)
Some checks failed
0/0 projects applied successfully.
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / OpenTofu Validate & Policy (pull_request) Failing after 7s
Security Scan / Security Scan (pull_request) Successful in 9s
2026-02-14 18:36:08 +01:00
Claude AI
bc79f11276 fix: remove checkov from CI (runs in Atlantis instead), avoid pip dependency conflicts
Some checks failed
PR Checks / OpenTofu Validate & Policy (pull_request) Failing after 8s
Security Scan / Security Scan (pull_request) Successful in 9s
2026-02-14 17:34:49 +01:00
Claude AI
57d938f4f4 fix: add gitleaks allowlist for tenant-vms.tf, fix pip3 PEP 668 in CI
Some checks failed
PR Checks / OpenTofu Validate & Policy (pull_request) Failing after 9s
Security Scan / Security Scan (pull_request) Failing after 32s
2026-02-14 17:19:00 +01:00
Claude AI
416a17158d fix: use ubuntu-latest runner for tofu-checks (opentofu image lacks node for actions/checkout)
Some checks failed
PR Checks / OpenTofu Validate & Policy (pull_request) Failing after 8s
Security Scan / Security Scan (pull_request) Failing after 5s
2026-02-14 17:16:03 +01:00
Claude AI
f6638e4dee ci: trigger fresh security scan
Some checks failed
PR Checks / tofu-checks (pull_request) Failing after 4s
Security Scan / Security Scan (pull_request) Failing after 8s
2026-02-14 17:08:50 +01:00
Claude AI
74e074ad6e feat: add security scanning pipeline (Phase 8.0)
Some checks failed
PR Checks / tofu-checks (pull_request) Failing after 3s
Security Scan / Security Scan (pull_request) Failing after 6s
- Add security-scan.yaml workflow: gitleaks, checkov, trivy IaC scan
- Update atlantis.yaml: add checkov step to plan workflow
- Use standard runner image with tool installation steps
2026-02-14 16:54:05 +01:00
root
f26e327de7 Add drift detection workflow (every 6h)
Some checks failed
Drift Detection / detect-drift (push) Failing after 2s
2026-02-09 09:15:11 +01:00
root
42413ac276 Add CI workflow for PR checks
Workflow runs on pull_request to main:
- tofu fmt -check
- tofu init -backend=false + validate
- conftest verify (policy syntax)
- conftest test (policy against plan)
2026-02-09 06:48:09 +01:00