You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This branch restores the BytePort CI workflow files after newline/control-character corruption and resolves the embedded release-attestation conflict. It also preserves the existing pilot/placement commits already on this worktree.
Evidence
PyYAML parse sweep: all workflows parse in pilot, placement-readback, and pr172-rebase worktrees.
git diff --check: clean.
Control-character and merged-comment scan: clean for the repaired workflow set.
Remaining gate
actionlint was not runnable locally because the host has Go 1.24.3 while the current actionlint release requires Go 1.25; automatic toolchain acquisition did not yield a binary. Exact-head CI must provide the semantic GitHub Actions gate before merge.
Workflow hardening commit ci: pin workflow actions and tighten permissions is now on this branch: all action refs are full SHAs, npm lifecycle installs use --ignore-scripts, npx was replaced with locked local npm exec, and the invalid === expression was corrected.
Go lint remediation commit fix(byteport): satisfy errcheck and staticcheck gates resolves the 49 logged issues.
With Go 1.25.0 and GOTOOLCHAIN=local, go test ./... passed locally across backend packages.
Focused Rust checks and workflow parser checks remain green.
Remote checks are rerunning; default-branch Dependabot findings (50 total) remain outside this PR's changed scope.
Audit run 30509379794 (head f2eeeaa34d6589b89019074241c97d6d22cbff4d) reached SonarCloud with the CPD exclusion argument intact (-Dsonar.cpd.exclusions=**/*_test.go). SonarScanner exited before analysis with: You are running CI analysis while Automatic Analysis is enabled. Please consider disabling one or the other. This is a SonarCloud project configuration conflict, not a source/CPD failure. We are leaving the CPD scope unchanged and require the project owner to disable Automatic Analysis before enabling CI analysis.
SonarCloud gate evidence (2026-07-30): the failure is a real duplication gate, not a missing workflow check. Public check output reports 3.6% Duplication on New Code (PR #318; PR #319 reports 3.3%, threshold <=3%). SonarCloud public project settings show sonar.autoscan.enabled=true for KooshaPari_BytePort. The repository scanner config contains sonar.cpd.exclusions=**/*_test.go, but the Automatic Analysis project mode is independent of the CI scanner and is still measuring test fixtures; the PR analysis reports new duplicate blocks in backend/models/*_100_percent_test.go plus provider files. This is not being bypassed here. Remediation requiring project/org admin access: disable SonarCloud Automatic Analysis for KooshaPari_BytePort and keep the pinned CI SonarSource/sonarqube-scan-action as the sole analysis path, then rerun this PR head. Do not relax the quality-gate threshold or broaden exclusions. If Automatic Analysis must remain enabled, the alternative is a source refactor to reduce measured duplication below 3%, followed by a fresh analysis.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Scope
This branch restores the BytePort CI workflow files after newline/control-character corruption and resolves the embedded release-attestation conflict. It also preserves the existing pilot/placement commits already on this worktree.
Evidence
git diff --check: clean.Remaining gate
actionlintwas not runnable locally because the host has Go 1.24.3 while the current actionlint release requires Go 1.25; automatic toolchain acquisition did not yield a binary. Exact-head CI must provide the semantic GitHub Actions gate before merge.