Skip to content

feat: consume shared sf-validate/sf-deploy reusable workflows - #5

Merged
gambe94 merged 6 commits into
mainfrom
feat/shared-cicd-callers
Aug 3, 2026
Merged

feat: consume shared sf-validate/sf-deploy reusable workflows#5
gambe94 merged 6 commits into
mainfrom
feat/shared-cicd-callers

Conversation

@gambe94

@gambe94 gambe94 commented Jul 12, 2026

Copy link
Copy Markdown
Contributor

What

Replaces the three inline CI/CD workflows with thin callers (~25 lines each) of the reusable Salesforce CI/CD layer in shared-github-actions:

Caller Calls Gives
pr-validate.yml sf-validate.yml@v1 delta check-only deploy with tests against the Dev Hub, Code Analyzer on changed files, scratch-org validation, sticky PR comment, sf-validate-<run> audit artifact
deploy.yml sf-deploy.yml@v1 production environment gate (required reviewer), quick deploy of the PR-validated request (delta/full fallbacks), GitHub Deployment record, sf-deploy-production-<run> audit artifact
  • Deleted: validate-pr.yml, deploy-staging.yml, deploy-production.ymlSTAGING_AUTH_URL/PRODUCTION_AUTH_URL secrets are obsolete; DEVHUB_AUTH_URL is the only secret.
  • template-verify.yml untouched.
  • New docs/CICD.md: setup, mermaid pipeline diagram, quick-deploy mechanics, audit trail + 90-day retention caveat (S3 export noted as the enterprise upgrade path).
  • README / CONTRIBUTING / .claude/references/deployment-devops.md aligned with the trunk-based single-gate model.

Sequencing

⚠️ The PR Validate check here stays red until shared-github-actions#6 merges and v1.2.0 is tagged (the @v1 tag doesn't contain sf-validate.yml yet). After tagging, re-run the failed check — this PR run is the first end-to-end signal (docs/workflows-only delta → graceful no-changes skip + analyzer + scratch org + PR comment).

After merge

  1. Approve the production gate on the resulting deploy run (empty delta → skip).
  2. Bootstrap the org: gh workflow run deploy.yml -f full-deploy=true → approve gate.
  3. Branch ruleset on main gets created once check names are visible from this PR's run.

🤖 Generated with Claude Code

gambe94 and others added 6 commits July 12, 2026 18:35
…lows

- pr-validate.yml -> sf-validate.yml@v1: delta check-only deploy with tests
  against the Dev Hub (quick-deploy handoff), Code Analyzer on changed files,
  scratch-org validation, sticky PR comment, audit artifact
- deploy.yml -> sf-deploy.yml@v1: production GitHub Environment gate, quick
  deploy of the PR-validated request (delta/full fallbacks), GitHub Deployment
  record, audit artifact; workflow_dispatch full-deploy bootstrap
- delete validate-pr.yml / deploy-staging.yml / deploy-production.yml;
  STAGING_AUTH_URL and PRODUCTION_AUTH_URL secrets are obsolete
- docs/CICD.md: setup, mermaid pipeline diagram, quick-deploy mechanics,
  audit trail + 90-day retention caveat (S3 export as enterprise path)
- align README, CONTRIBUTING and deployment-devops reference with the
  trunk-based, single-gate model

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
…ker Hub

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@gambe94
gambe94 merged commit 74592d1 into main Aug 3, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant