feat(product): grants pack (OTF concept note, Meedan/DPG/OSC/NLnet), … #137
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Node.js CI | |
| on: | |
| push: | |
| branches: [ "main", "master", "revival/**" ] | |
| pull_request: | |
| branches: [ "main", "master" ] | |
| jobs: | |
| build: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| node-version: [22.x] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Use Node.js ${{ matrix.node-version }} | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: ${{ matrix.node-version }} | |
| cache: 'npm' | |
| - run: npm ci | |
| - run: npm run lint --if-present | |
| - run: npm run check:licenses | |
| - run: npm test | |
| # Alerts classifier regression gate — the same fixture harness exposed | |
| # live at /quality/eval. A classifier edit that breaks a known | |
| # false-positive family fails CI before it ships. | |
| classifier-eval: | |
| runs-on: ubuntu-latest | |
| defaults: | |
| run: | |
| working-directory: services/westbank-alerts | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version: '3.11' | |
| - run: pip install -q pydantic pydantic-settings pytest | |
| - name: Classifier false-positive audit | |
| run: API_SECRET_KEY=ci-eval-secret-key-16chars python test_classifier_fp_audit.py | |
| - name: Checkpoint whitelist suite | |
| run: API_SECRET_KEY=ci-eval-secret-key-16chars python -m pytest test_checkpoint_whitelist.py -q |