Skip to content
This repository was archived by the owner on Apr 14, 2026. It is now read-only.
This repository was archived by the owner on Apr 14, 2026. It is now read-only.

Org migration: reconfigure CI/CD across all repos #173

@zeevdr

Description

@zeevdr

Description

Reconfigure GitHub Actions, secrets, permissions, and environments for all repos in the new org.

Org-level setup

  • Enable GitHub Actions in org settings
  • Create org-level secrets:
    • BUF_TOKEN — for BSR push (decree)
    • PROJECT_TOKEN — PAT for org project board
  • Create org-level GitHub Project board (replaces users/zeevdr/projects/2)

Per-repo: decree

  • Branch protection on main (require CI check, enforce for admins)
  • Enable GitHub Pages (for mkdocs documentation site)
  • Verify ghcr.io push works (auto via github.repository_owner)
  • Verify goreleaser creates GitHub Releases
  • Update project.yml with new org project URL

Per-repo: decree-python

  • Branch protection on main
  • Create pypi environment (for OIDC trusted publishing)
  • Update project.yml with new org project URL

Per-repo: decree-typescript

  • Branch protection on main
  • Create npm environment (for OIDC trusted publishing)
  • Update project.yml with new org project URL

Per-repo: decree-ui

  • Branch protection on main
  • Update project.yml with new org project URL

Depends on

Acceptance criteria

  • CI passes on all 4 repos
  • Docker images push to ghcr.io/opendecree/
  • GitHub Pages deploys docs
  • Branch protection active on all repos
  • Project board receives issues/PRs from all repos

Metadata

Metadata

Assignees

No one assigned

    Labels

    ciCI/Infrastructuresize: MModerate — a day or two, clear scope

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions