Repository navigation
Preserve required CI and protect Swift toolkit publication - #8
Merged
Merged
Conversation
|
You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool. What Enabling Code Scanning Means:
For more information about GitHub Code Scanning, check out the documentation. |
15 tasks done
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The current main build crashes compiling a SwiftUI Binding setter, preventing app tests, packaging, and Swift scanning. Use the existing explicit-closure repair and separate the category control accessibility identity, while preserving all five required checks. Pin Actions, add Actions analysis, and separate read-only CodeQL extraction from SARIF upload. Release publication now requires the protected github-release environment. Existing firmware feature work in PR #7 is outside this change.
Repository AGENTS.md records the native validation commands, scanner boundaries, and repository-specific publication gates.
All source analysis explicitly disables SARIF and database publication. Upload-only jobs publish each language report, and the always-running Code scanning uploads gate rejects failed or skipped uploads.
Validation: workflow YAML parsed, external Action revisions verified against their upstream repositories, and git diff --check passed. All ten required checks passed at final candidate
a567c27, including native UI/layout, simulator integration, Release packaging, both language analyses and both SARIF uploads. CI and CodeQL completed successfully. The uploaded analyses cover test-merge0bf4d417, whose source tree matches the final candidate. Inspection of the retained Swift SARIF confirmed zero compiler extraction diagnostics, including diagnostics labeledlevel: none. This establishes successful extraction and upload, not absence of findings or complete imported-module semantics. The PR merged as3b7c5a7. No release tag or product deployment is part of this change.