{"id":34636737,"url":"https://github.com/fullstack-pw/pipelines","last_synced_at":"2026-03-15T01:46:00.681Z","repository":{"id":269029733,"uuid":"906191302","full_name":"fullstack-pw/pipelines","owner":"fullstack-pw","description":null,"archived":false,"fork":false,"pushed_at":"2025-04-07T23:56:08.000Z","size":33,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-04-08T00:27:05.805Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/fullstack-pw.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-12-20T11:01:23.000Z","updated_at":"2025-04-07T23:56:11.000Z","dependencies_parsed_at":null,"dependency_job_id":"a0a81563-bacf-446b-ac8b-ca1ee3cd7f9f","html_url":"https://github.com/fullstack-pw/pipelines","commit_stats":null,"previous_names":["fullstack-pw/pipelines"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/fullstack-pw/pipelines","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fullstack-pw%2Fpipelines","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fullstack-pw%2Fpipelines/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fullstack-pw%2Fpipelines/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fullstack-pw%2Fpipelines/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/fullstack-pw","download_url":"https://codeload.github.com/fullstack-pw/pipelines/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fullstack-pw%2Fpipelines/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28005408,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-12-24T02:00:07.193Z","response_time":83,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-12-24T17:02:29.326Z","updated_at":"2026-03-15T01:46:00.662Z","avatar_url":"https://github.com/fullstack-pw.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"pipelines\n=========\n\nThis repository is the single source of truth for all CI/CD pipeline logic across the **homelabz.eu** project. All GitHub Actions reusable workflows live here and are called from thin caller workflows in each application repository.\n\n* * * * *\n\nReusable Workflows\n------------------\n\nAll workflows are under `.github/workflows/` and use `workflow_call` as their only trigger.\n\n### Build \u0026 Containerization\n\n| Workflow | Description | Inputs |\n|---|---|---|\n| `build-and-push.yml` | Build a single Docker image via buildctl and push to Harbor | `app-context`, `app-name`, `app-dockerfile` (opt) |\n| `build-changed-dockerfiles.yml` | Auto-discover changed Dockerfiles in a repo, derive image name from directory, build all | `registry` (opt), `library-prefix` (opt) |\n\n### Deploy\n\n| Workflow | Description | Inputs |\n|---|---|---|\n| `deploy-kustomize.yml` | Kustomize build + kubectl apply + rollout wait | `kustomize-dir`, `app-name`, `context` (opt) |\n| `ephemeral-environment.yml` | Full PR ephemeral cluster lifecycle: Cluster API provisioning, Docker build, kustomize deploy, Cypress tests, cleanup | `image-name`, `dev-hostname-placeholder`, `deployment-name`, `cypress-spec`, `cypress-env-key`, `kustomize-overlay` (opt), `registry` (opt) |\n\n### Infrastructure\n\n| Workflow | Description | Inputs |\n|---|---|---|\n| `opentofu-infra.yml` | OpenTofu plan (on PR) and apply (on push to main) for the infra repo, including Cluster API wait, kubeconfig SOPS update, and Vault sync | none |\n| `ansible.yml` | Ansible provisioning triggered by `[ansible \u003cname\u003e]` in commit message | `inventory-file` (opt), `playbook-dir` (opt), `vault-addr` (opt), `new-hosts-file` (opt) |\n\n### Testing\n\n| Workflow | Description | Inputs |\n|---|---|---|\n| `go-tests.yml` | `go test ./...` + golangci-lint | `go-dir` |\n| `cypress.yml` | Cypress E2E runner | `start` (opt), `env-vars` (opt) |\n| `iac-tests.yml` | Trivy IaC config scan with SARIF output | none |\n\n### Security \u0026 Quality\n\n| Workflow | Description | Inputs |\n|---|---|---|\n| `sec-trivy-fs.yml` | Trivy filesystem scan on the calling repo | none |\n| `sec-trufflehog.yml` | TruffleHog secret scanning (`--results=verified,unknown`) | none |\n| `conventional-commits.yml` | Validates PR title follows conventional commits spec | none |\n| `release.yml` | Semantic release: changelog, git tag, GitHub release | none |\n\n* * * * *\n\nCallers\n-------\n\n| Repo | Workflows calling pipelines |\n|---|---|\n| `homelabz-eu/infra` | opentofu-infra, ansible, build-changed-dockerfiles, release, conventional-commits, sec-trivy-fs, sec-trufflehog |\n| `homelabz-eu/cks-backend` | build-and-push, deploy-kustomize, ephemeral-environment |\n| `homelabz-eu/cks-frontend` | build-and-push, deploy-kustomize, ephemeral-environment |\n\n* * * * *\n\nRunners\n-------\n\n| Label | Used by |\n|---|---|\n| `self-hosted` | Most workflows |\n| `self-hosted-buildkit` | build-and-push, build-changed-dockerfiles |\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffullstack-pw%2Fpipelines","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffullstack-pw%2Fpipelines","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffullstack-pw%2Fpipelines/lists"}