fix: post-merge audit 第二輪 —— 讓 --retroactive 的 gate 真的執行,以及 Codex 那批未… #151
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # tests.yml — run every fixture suite on push + PR (#217). | |
| # The enforcement link for the repo's drift-guard hard locks: suites only | |
| # guarded what someone remembered to run (#214 R2 DA finding 15). | |
| # | |
| # NOTE: init.defaultBranch is deliberately NOT configured here — fixtures must | |
| # be self-sufficient (#224); masking that class in CI would hide real bugs. | |
| name: tests | |
| on: | |
| push: | |
| branches: [main] | |
| pull_request: | |
| jobs: | |
| suites: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 20 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Run all fixture suites | |
| run: bash plugins/issue-driven-dev/scripts/run-all-tests.sh |