Skip to content

SEC-96 chore(ci): replace uptick/actions with inline workflow steps#64

Merged
uptickmetachu merged 1 commit intomasterfrom
sec-96/private-actions
Mar 15, 2026
Merged

SEC-96 chore(ci): replace uptick/actions with inline workflow steps#64
uptickmetachu merged 1 commit intomasterfrom
sec-96/private-actions

Conversation

@uptickmetachu
Copy link
Contributor

Motivation

To make uptick/actions a private repository, all cross-repo references to its reusable workflows must be removed. This PR vendors in standard GitHub Actions directly.

Changes

  • Replaced uptick/actions/.github/workflows/ci.yaml@main calls with inline steps in both ci.yaml and release-please.yaml
  • CI: checkout, setup-python, mise-action, deploy key setup, mise run ci
  • Release: AWS OIDC, Docker Buildx, ECR login, build-push-action with explicit tags
  • Upgraded Python from 3.11 to 3.12
  • All action SHAs pinned with ratchet comments

Test plan

  • CI workflow passes on this PR
  • Verify Docker build/push works on next release (release-please path)

🤖 Generated with Claude Code

@github-actions
Copy link
Contributor

github-actions bot commented Mar 15, 2026

Docker Images

Commit: 71d1df3e069f0162f33245819f39ec2b0cf61309

Tag
610829907584.dkr.ecr.ap-southeast-2.amazonaws.com/splat:test-71d1df3

Vendor in standard GitHub Actions directly instead of calling the
reusable uptick/actions ci.yaml workflow. This removes the cross-repo
dependency so uptick/actions can be made private.

Also upgrades Python from 3.11 to 3.12.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@uptickmetachu uptickmetachu force-pushed the sec-96/private-actions branch from 6aca57e to 71d1df3 Compare March 15, 2026 23:38
@uptickmetachu uptickmetachu merged commit 4dd7f9b into master Mar 15, 2026
3 checks passed
@uptickmetachu uptickmetachu deleted the sec-96/private-actions branch March 15, 2026 23:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant