Replace every remaining reference to the old Gitea infrastructure with the new GitHub-hosted equivalents across all documentation, wiki pages, test files, and historical ticket summaries. - README.md: CI badge, clone URL, releases link, CI/CD section, project structure - docs/wiki/CICD-Pipeline.md: full rewrite for GitHub Actions + ghcr.io - docs/wiki/Home.md: CI badge, releases link, phase status, tech stack - docs/wiki/Troubleshooting.md: rewrite CI troubleshooting for GitHub Actions - docs/architecture/README.md: update CI/CD pipeline diagram - AGENTS.md: CI/CD section, environment references - PLAN.md: directory structure, pipeline table - SECURITY_AUDIT.md: mark C3 and L4 findings as resolved - ticket-git-cliff-changelog.md: workflow path updated - tickets/ci-runner-speed-optimization.md: image registry updated - 2026-hackathon_AgenticFeature.md: workflow path updated - tests: workflow path assertions updated in all three test files
3.9 KiB
3.9 KiB
Ticket Summary — ADO #727547
Description
Migrate the tftsr-devops_investigation repository from gogs.tftsr.com/sarman/tftsr-devops_investigation to github.com/msicie/apollo_nxt-trcaa. All CI/CD pipelines, container registries, and PR review tooling must be rebuilt from scratch targeting GitHub. The self-hosted qwen3-coder-next LLM reviewer is replaced by native GitHub Copilot code review. Branch protection on main must require passing CI checks and allow owner/CODEOWNERS to bypass.
Acceptance Criteria
- Repository exists at
github.com/msicie/apollo_nxt-trcaawithmainas the default branch .github/workflows/test.ymlruns Rust and frontend tests on every push/PR targetingmain.github/workflows/release.ymlauto-tags, builds for Linux amd64+arm64, Windows amd64, macOS ARM64+Intel, and uploads artifacts to GitHub Releases.github/workflows/build-images.ymlbuilds and pushes pre-baked CI images toghcr.io/msicie/- All Gogs/Gitea pipeline references (
.gitea/workflows/,172.0.0.29:3000,RELEASE_TOKEN) removed - PR review uses native GitHub Copilot (no external LLM service required)
.github/CODEOWNERSrequires@Shaun-Arman-VFK387_motoand@github-copiloton all PRsmainbranch protection: requiresrust-test,frontend-test, CODEOWNER review; admins can bypass- Wiki sync targets
github.com/msicie/apollo_nxt-trcaa/wiki - One-time: trigger
build-images.ymlto bootstrapghcr.io/msicie/images - One-time: enable Copilot Code Review in
msicieorg settings
Work Implemented
| File | Change |
|---|---|
.github/workflows/test.yml |
Full rewrite — port from .gitea/workflows/test.yml (Gitea); jobs renamed to rust-test + frontend-test to match branch protection check names; uses ghcr.io/msicie/trcaa-linux-amd64:rust1.88-node22 |
.github/workflows/release.yml |
Full rewrite — port from .gitea/workflows/auto-tag.yml; GITHUB_TOKEN replaces RELEASE_TOKEN; all Gogs API calls replaced with gh CLI; adds build-macos-intel job (macos-13); master refs → main |
.github/workflows/build-images.yml |
Rewrite — login to ghcr.io with GITHUB_TOKEN; push images to ghcr.io/msicie/trcaa-* |
.github/workflows/pr-review.yml |
Deleted — replaced by native GitHub Copilot |
.gitea/workflows/ |
Deleted entire directory |
.github/CODEOWNERS |
Created — @Shaun-Arman-VFK387_moto @github-copilot on all paths |
Makefile |
Replace GOGS_API/GOGS_REPO/GOGS_TOKEN with GH_REPO/GH_TOKEN and gh release upload |
CLAUDE.md |
Update wiki URL, CI/CD section, branch references (master → main) |
Branch protection on main:
- Require PRs before merging
- Require 1 approving review
- Require CODEOWNER review (
require_code_owner_reviews: true) - Required status checks:
rust-test,frontend-test enforce_admins: false— owner and admins can bypass
PR: https://github.com/msicie/apollo_nxt-trcaa/pull/1
Testing Needed
- Bootstrap Docker images (one-time): Go to Actions → Build CI Docker Images → Run workflow. Verify all three images appear at
ghcr.io/msicie/. - Enable Copilot Code Review (one-time manual):
msicieorg Settings → Copilot → Code Review → Enable. - Test pipeline: Verify
rust-testandfrontend-testchecks appear and pass on PR #1. - Copilot review: After enabling, open a new PR and confirm
@github-copilotis auto-requested. - Branch protection enforcement: Attempt to merge a PR with a failing check — confirm it is blocked.
- Owner bypass: Confirm
@Shaun-Arman-VFK387_motocan override protection and merge. - Release pipeline: Push a
v*tag (e.g.v0.3.10) and confirm all 5 platform jobs complete and artifacts appear in GitHub Releases. - Wiki sync: Confirm release workflow wiki-sync job pushes content to
github.com/msicie/apollo_nxt-trcaa/wiki.