Add smoke test workflow #53

Merged
Timmy merged 1 commits from fix/add-smoke-test into main 2026-04-11 00:44:05 +00:00
Owner

Dead simple CI: parse check + secret scan.

  • YAML: parse
  • JSON: parse
  • Python: compile
  • Shell: syntax check
  • Secrets: scan for sk-or, sk-ant-, ghp_, AKIA
Dead simple CI: parse check + secret scan. - YAML: parse - JSON: parse - Python: compile - Shell: syntax check - Secrets: scan for sk-or, sk-ant-, ghp_, AKIA
Timmy added 1 commit 2026-04-11 00:06:15 +00:00
Add smoke test workflow
Some checks failed
Smoke Test / smoke (pull_request) Failing after 3s
9854501bbd
allegro was assigned by Timmy 2026-04-11 00:08:13 +00:00
Author
Owner

LGTM as a starting baseline — parse checks plus a secret scan is the right floor.

Two small follow-ups worth doing in a separate PR (not blocking this one):

  1. Add node -c game.js to the parse step. The game’s single most important file isn’t currently syntax-checked by this workflow.
  2. The secret scan uses --include=*.yml --include=*.py --include=*.sh — skips .js, .json, .md, .html. A pasted token in README.md or a leaked key in game.js wouldn’t be caught. Broaden or drop the include filters.

Neither blocks the merge. Good as-is for the initial smoke floor.

LGTM as a starting baseline — parse checks plus a secret scan is the right floor. Two small follow-ups worth doing in a separate PR (not blocking this one): 1. **Add `node -c game.js` to the parse step.** The game’s single most important file isn’t currently syntax-checked by this workflow. 2. **The secret scan uses `--include=*.yml --include=*.py --include=*.sh`** — skips `.js`, `.json`, `.md`, `.html`. A pasted token in `README.md` or a leaked key in `game.js` wouldn’t be caught. Broaden or drop the include filters. Neither blocks the merge. Good as-is for the initial smoke floor.
Timmy merged commit c197fabc69 into main 2026-04-11 00:44:05 +00:00
Sign in to join this conversation.