README.md

CI workflows

GitHub Actions only loads workflow YAML from .github/workflows/ (repo root). Executable files use the ci-* prefix there; this folder is the index and runbook for continuous integration.

Pipeline map: .github/CI-CD.md · Contributing: docs/CONTRIBUTING.md

Workflows

Workflow	File	Job	Trigger	Purpose
CI / App	../ci-app.yml	App (lint · typecheck · build)	PR, push (app paths)	ESLint, Prettier, TypeScript, tests, OpenAPI, icons, production build
CI / Docs	../ci-docs.yml	Extended docs (MkDocs strict)	PR, push (docs paths)	Six-locale MkDocs strict build + Mermaid verify
CI / Docker smoke	../ci-docker-smoke.yml	Docker image (build only)	PR, push (Docker paths)	docker build with GHA cache — no push

All support workflow_dispatch.

Path filters (summary)

Workflow	Runs when you change
ci-app	src/, server/, shared/, tests/, package.json, OpenAPI assets, Makefile, …
ci-docs	extended-docs/, docs/, agent/
ci-docker-smoke	Dockerfile, docker-compose*, .dockerignore, server/, lockfiles

Local parity

make check                 # ci-app (lint, format, typecheck, test, openapi, build)
make extended-docs-check   # ci-docs
docker build -t cve-radar:ci .   # ci-docker-smoke

Branch protection (suggested)

Required check	Workflow
App (lint · typecheck · build)	ci-app.yml
Extended docs (MkDocs strict)	ci-docs.yml
Docker image (build only)	ci-docker-smoke.yml (optional)

Secrets

Secret	Used by	Notes
MERGIFY_TOKEN	ci-app.yml	Optional — JUnit Test Insights (MERGIFY.md)

See .github/ACTIONS-SECRETS.md.

Related

Topic	Doc
Security checks	../security/README.md
Quality / coverage	../quality-codecov.yml, ../quality-sonarcloud.yml