stacklok / toolhive / 24738838674
66%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 655
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 66.24% (+0.04%) from 66.196%
24738838674

push

github

web-flow 
Add advisory CRD schema compatibility CI check (#4980)

* Add advisory CRD schema compatibility CI check

The v1beta1 graduation in #4849 made a stability commitment that is
enforced only by convention today. Adds a new api-compat workflow that
runs crd-schema-checker on every PR touching operator API surface and
reports compatible/incompatible/unknown status in the job step summary.

Phase 1 is advisory: the job runs with continue-on-error so findings
are surfaced without blocking merges. Phase 2 will flip enforcement and
add the api-break-allowed escape hatch label. Part of #4972.

Baseline is the last published CRD chart from OCI, falling back to
origin/main when the chart for the latest tag is not yet published
(the release-to-publish lag window). NoBools and NoMaps style
validators are disabled — they are OpenShift API-style rules, not
compat-breaking checks, and fire on fields we legitimately use.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* Address review feedback on API compat workflow

Apply findings from the multi-agent consensus review. Summary:

- SHA-pin crd-schema-checker to 3fee146022bf — the tool has no release
  tags, and @latest left CI non-deterministic and exposed the runner
  to supply-chain risk (continue-on-error does not sandbox the step).
- Add timeout-minutes: 10 — expected runtime is ~3 min; the bound
  protects against a hung helm pull or go install without the 6h
  default burning CI budget on a genuine hang.
- Drop 2>/dev/null from helm pull — its stderr is one useful line when
  the fallback path activates; redirecting hid transient ghcr.io
  outages behind the expected "tag not yet published" case.
- Narrow path filter to files/crds/** plus the workflow self-watch.
  templates/** is caught by operator-ci's generate-crds drift check;
  values.yaml and crd-helm-wrapper only change Helm conditionals and
  annotations the checker ignores, and the workflow's explicit --set
  flags force every CRD ... (continued)

58585 of 88443 relevant lines covered (66.24%)

62.76 hits per line

Coverage Regressions

Lines Coverage ∆ File
2
94.77
 -1.31% pkg/vmcp/composer/dag_executor.go
Jobs
ID Job ID Ran Files Coverage
1 24738838674.1 655
66.24
 GitHub Action Run
Source Files on build 24738838674