Skip to content

RFC: G2 governance check should verify spectral/linting is in the workflow, not just any CI file #2

@Darshitpandya

Description

@Darshitpandya

Known Gap in G2 Check

Current behaviour: G2 awards 10 points if any .github/workflows/*.yml exists — including build, deploy, or test workflows that have nothing to do with API linting.

The problem: A repo with only a deploy.yml workflow passes G2 and gets 10 points, even though no API governance is in place.

Proposed fix: Parse the workflow YAML and check that it references spectral, redocly, api-lint, or similar linting tools before awarding points.

Tradeoff: This makes the check more accurate but also more brittle — a team using a custom linting tool not in the keyword list would fail despite having governance.

Questions:

  1. Should we check for specific tool names (spectral, redocly) or a more generic pattern?
  2. Should a partial score (5 pts) be awarded for any CI + full (10 pts) for verified linting CI?
  3. Should we support non-GitHub CI systems (GitLab, CircleCI, Azure Pipelines)?

See SCORING.md for current rationale.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingenhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions