From 78fbe648f189cc34d95b093a2fa80214bd37c4b8 Mon Sep 17 00:00:00 2001 From: Praveen Bishnoi Date: Wed, 12 Aug 2026 08:22:13 +0530 Subject: [PATCH 1/3] ci: add GitHub Actions workflow for linting and verification gates --- .github/workflows/ci.yml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 .github/workflows/ci.yml diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml new file mode 100644 index 0000000..4e833a4 --- /dev/null +++ b/.github/workflows/ci.yml @@ -0,0 +1,30 @@ +name: CI + +on: + push: + branches: [ main ] + pull_request: + branches: [ main ] + +jobs: + validate: + name: Lint & Verify + runs-on: ubuntu-latest + + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Set up Python + uses: actions/setup-python@v5 + with: + python-version: "3.11" + + - name: Run skin linter + run: python scripts/lint-skin.py --all --baseline + + - name: Verify sequence OAuth specs + run: python scripts/verify-sequence-oauth.py + + - name: Verify icon build script + run: python scripts/build-icons.py From 2f697ab712c74f863f4bef2b8b4b18c1691c1254 Mon Sep 17 00:00:00 2001 From: Praveen Bishnoi Date: Wed, 12 Aug 2026 08:22:46 +0530 Subject: [PATCH 2/3] docs(ci): document automated GitHub Actions validation and add drawio verifier step --- .github/workflows/ci.yml | 4 ++++ README.md | 2 ++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4e833a4..19030da 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -26,5 +26,9 @@ jobs: - name: Verify sequence OAuth specs run: python scripts/verify-sequence-oauth.py + - name: Verify draw.io import script + run: python scripts/verify-drawio-import.py + - name: Verify icon build script run: python scripts/build-icons.py + diff --git a/README.md b/README.md index 57009e8..fb0acc0 100644 --- a/README.md +++ b/README.md @@ -340,6 +340,8 @@ If you touch the draw.io import path, `python3 scripts/verify-drawio-import.py` it drives the real extractor against `scripts/fixtures/sample-architecture.drawio` in all four container formats and checks the references stay in sync. +All pull requests and pushes are automatically validated via GitHub Actions CI (`.github/workflows/ci.yml`). + ### What loads when At startup, the agent sees only the skill name and description. When a request matches, it loads `SKILL.md`; type references are pulled in only when relevant. This keeps the skill fast even with 36 reference files. From 0d47ae3a9f330ed6066d65f5d970c1b2ca2958e9 Mon Sep 17 00:00:00 2001 From: Cathryn Lavery Date: Tue, 11 Aug 2026 21:25:22 -0700 Subject: [PATCH 3/3] fix(ci): harden validation and verify generated assets --- .github/workflows/ci.yml | 21 +++++++++++++++------ 1 file changed, 15 insertions(+), 6 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 19030da..f73b626 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -6,14 +6,20 @@ on: pull_request: branches: [ main ] +permissions: + contents: read + jobs: validate: name: Lint & Verify runs-on: ubuntu-latest + timeout-minutes: 10 steps: - name: Checkout repository uses: actions/checkout@v4 + with: + persist-credentials: false - name: Set up Python uses: actions/setup-python@v5 @@ -21,14 +27,17 @@ jobs: python-version: "3.11" - name: Run skin linter - run: python scripts/lint-skin.py --all --baseline + run: python3 scripts/lint-skin.py --all --baseline - name: Verify sequence OAuth specs - run: python scripts/verify-sequence-oauth.py + run: python3 scripts/verify-sequence-oauth.py - name: Verify draw.io import script - run: python scripts/verify-drawio-import.py - - - name: Verify icon build script - run: python scripts/build-icons.py + run: python3 scripts/verify-drawio-import.py + - name: Verify generated icon assets + run: | + python3 scripts/build-icons.py + git diff --ignore-space-at-eol --exit-code -- \ + skills/diagram-design/assets/icons.html \ + skills/diagram-design/references/primitive-icons.md