Skip to content

ci: use GitHub-hosted runners in fork#7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
michaelmwu merged 1 commit into from
Aug 28, 2026
Merged

ci: use GitHub-hosted runners in fork #7

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 7 additions & 7 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -118,7 +118,7 @@ jobs:

migration-order:
name: Migration order
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest
needs: ci_changes
if: needs.ci_changes.outputs.migration_order == 'true'
steps:
Expand All@@ -132,7 +132,7 @@ jobs:

harness-server-checks:
name: Harness server fmt, clippy, and tests
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest
needs: ci_changes
if: needs.ci_changes.outputs.harness_server_checks == 'true'
steps:
Expand DownExpand Up@@ -163,7 +163,7 @@ jobs:

rust-api:
name: Rust API fmt, clippy, and tests
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest
needs: ci_changes
if: needs.ci_changes.outputs.rust_api == 'true'
steps:
Expand DownExpand Up@@ -365,7 +365,7 @@ jobs:

slackbotv2-tests:
name: Slackbot v2 tests
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest
needs: ci_changes
if: needs.ci_changes.outputs.slackbotv2_tests == 'true'
steps:
Expand DownExpand Up@@ -423,7 +423,7 @@ jobs:

discordbot-checks:
name: Discordbot typecheck and tests
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest
needs: ci_changes
if: needs.ci_changes.outputs.discordbot_checks == 'true'
steps:
Expand DownExpand Up@@ -457,7 +457,7 @@ jobs:

githubbot-checks:
name: Githubbot typecheck and tests
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest
needs: ci_changes
if: needs.ci_changes.outputs.githubbot_checks == 'true'
steps:
Expand DownExpand Up@@ -491,7 +491,7 @@ jobs:

teamsbot-checks:
name: Teamsbot typecheck and tests
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest
needs: ci_changes
if: needs.ci_changes.outputs.teamsbot_checks == 'true'
steps:
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/console-ci.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -46,119 +46,119 @@
fi

scan_ruby:
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest
needs: console_changes
if: needs.console_changes.outputs.relevant == 'true'

steps:
- name: Checkout code
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Set up Ruby
uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
with:
working-directory: services/console
bundler-cache: true

- name: Scan for common Rails security vulnerabilities using static analysis
run: bin/brakeman --no-pager

scan_js:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest
needs: console_changes
if: needs.console_changes.outputs.relevant == 'true'

steps:
- name: Checkout code
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Set up Ruby
uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
with:
working-directory: services/console
bundler-cache: true

- name: Scan for security vulnerabilities in JavaScript dependencies
run: bin/importmap audit

lint:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest
needs: console_changes
if: needs.console_changes.outputs.relevant == 'true'
env:
RUBOCOP_CACHE_ROOT: ${{ github.workspace }}/services/console/tmp/rubocop
steps:
- name: Checkout code
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Set up Ruby
uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
with:
working-directory: services/console
bundler-cache: true

- name: Prepare RuboCop cache
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
env:
DEPENDENCIES_HASH: ${{ hashFiles('services/console/.ruby-version', 'services/console/**/.rubocop.yml', 'services/console/**/.rubocop_todo.yml', 'services/console/Gemfile.lock') }}
with:
path: ${{ env.RUBOCOP_CACHE_ROOT }}
key: rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-${{ github.ref_name == github.event.repository.default_branch && github.run_id || 'default' }}
restore-keys: |
rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-

- name: Lint code for consistent style
run: bin/rubocop -f github

test:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest
needs: console_changes
if: needs.console_changes.outputs.relevant == 'true'

services:
postgres:
image: paradedb/paradedb:0.23.0-pg16
env:
POSTGRES_USER: postgres
POSTGRES_PASSWORD: postgres
ports:
- 5432:5432
options: --health-cmd="pg_isready -U postgres" --health-interval=10s --health-timeout=5s --health-retries=5
steps:
- name: Checkout code
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Install packages
run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libvips libpq-dev

- name: Set up Ruby
uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
with:
working-directory: services/console
bundler-cache: true

- name: Verify migrations match the checked-in schema
env:
RAILS_ENV: test
IRON_CONTROL_DB_HOST: localhost
IRON_CONTROL_DB_PORT: 5432
IRON_CONTROL_DB_USERNAME: postgres
IRON_CONTROL_DB_PASSWORD: postgres
run: |
bin/rails db:create db:migrate
git diff --exit-code -- db/schema.rb

- name: Run tests
env:
RAILS_ENV: test
IRON_CONTROL_DB_HOST: localhost
IRON_CONTROL_DB_PORT: 5432
IRON_CONTROL_DB_USERNAME: postgres
IRON_CONTROL_DB_PASSWORD: postgres
# RAILS_MASTER_KEY: ${{ secrets.RAILS_MASTER_KEY }}
run: bin/rails db:test:prepare test

console-ci-success:

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
name: Console CI success
runs-on: ubuntu-latest
if: always()
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/console-gem-audit.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -13,7 +13,7 @@ defaults:

jobs:
scan_gems:
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest

steps:
- name: Checkout code
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/docs.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -26,7 +26,7 @@ permissions:
jobs:
build-and-deploy:
name: Build and deploy docs
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest
timeout-minutes: 20
strategy:
matrix:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/pr-audit.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -8,7 +8,7 @@ permissions: {}

jobs:
publish:
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest
if: github.event.label.name == 'cyclops'
steps:
- name: Publish event
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release-chart.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -20,7 +20,7 @@ jobs:
release:
permissions:
contents: write
runs-on: depot-ubuntu-24.04-16
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Expand Down
, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
ci: use GitHub-hosted runners in fork by michaelmwu · Pull Request #7 · 508-dev/centaur · GitHub
Skip to content
ci: use GitHub-hosted runners in fork#7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

michaelmwu
merged 1 commit into

from

Aug 28, 2026
 Merged


ci: use GitHub-hosted runners in fork
#7
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


1 commit


Select commit


File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


14 changes: 7 additions & 7 deletions
.github/workflows/ci.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -118,7 +118,7 @@ jobs:

 migration-order:
 name: Migration order
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.migration_order == 'true'
 steps:
Expand All@@ -132,7 +132,7 @@ jobs:

 harness-server-checks:
 name: Harness server fmt, clippy, and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.harness_server_checks == 'true'
 steps:
Expand DownExpand Up@@ -163,7 +163,7 @@ jobs:

 rust-api:
 name: Rust API fmt, clippy, and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.rust_api == 'true'
 steps:
Expand DownExpand Up@@ -365,7 +365,7 @@ jobs:

 slackbotv2-tests:
 name: Slackbot v2 tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.slackbotv2_tests == 'true'
 steps:
Expand DownExpand Up@@ -423,7 +423,7 @@ jobs:

 discordbot-checks:
 name: Discordbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.discordbot_checks == 'true'
 steps:
Expand DownExpand Up@@ -457,7 +457,7 @@ jobs:

 githubbot-checks:
 name: Githubbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.githubbot_checks == 'true'
 steps:
Expand DownExpand Up@@ -491,7 +491,7 @@ jobs:

 teamsbot-checks:
 name: Teamsbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.teamsbot_checks == 'true'
 steps:
Expand Down

8 changes: 4 additions & 4 deletions
.github/workflows/console-ci.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -46,119 +46,119 @@
 fi

 scan_ruby:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Scan for common Rails security vulnerabilities using static analysis
 run: bin/brakeman --no-pager

 scan_js:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Scan for security vulnerabilities in JavaScript dependencies
 run: bin/importmap audit

 lint:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'
 env:
 RUBOCOP_CACHE_ROOT: ${{ github.workspace }}/services/console/tmp/rubocop
 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Prepare RuboCop cache
 uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
 env:
 DEPENDENCIES_HASH: ${{ hashFiles('services/console/.ruby-version', 'services/console/**/.rubocop.yml', 'services/console/**/.rubocop_todo.yml', 'services/console/Gemfile.lock') }}
 with:
 path: ${{ env.RUBOCOP_CACHE_ROOT }}
 key: rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-${{ github.ref_name == github.event.repository.default_branch && github.run_id || 'default' }}
 restore-keys: |
 rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-

 - name: Lint code for consistent style
 run: bin/rubocop -f github

 test:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 services:
 postgres:
 image: paradedb/paradedb:0.23.0-pg16
 env:
 POSTGRES_USER: postgres
 POSTGRES_PASSWORD: postgres
 ports:
 - 5432:5432
 options: --health-cmd="pg_isready -U postgres" --health-interval=10s --health-timeout=5s --health-retries=5
 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Install packages
 run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libvips libpq-dev

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Verify migrations match the checked-in schema
 env:
 RAILS_ENV: test
 IRON_CONTROL_DB_HOST: localhost
 IRON_CONTROL_DB_PORT: 5432
 IRON_CONTROL_DB_USERNAME: postgres
 IRON_CONTROL_DB_PASSWORD: postgres
 run: |
 bin/rails db:create db:migrate
 git diff --exit-code -- db/schema.rb

 - name: Run tests
 env:
 RAILS_ENV: test
 IRON_CONTROL_DB_HOST: localhost
 IRON_CONTROL_DB_PORT: 5432
 IRON_CONTROL_DB_USERNAME: postgres
 IRON_CONTROL_DB_PASSWORD: postgres
 # RAILS_MASTER_KEY: ${{ secrets.RAILS_MASTER_KEY }}
 run: bin/rails db:test:prepare test

 console-ci-success:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 name: Console CI success
 runs-on: ubuntu-latest
 if: always()
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/console-gem-audit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -13,7 +13,7 @@ defaults:

jobs:
 scan_gems:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest

 steps:
 - name: Checkout code
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -26,7 +26,7 @@ permissions:
jobs:
 build-and-deploy:
 name: Build and deploy docs
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 timeout-minutes: 20
 strategy:
 matrix:
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/pr-audit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -8,7 +8,7 @@ permissions: {}

jobs:
 publish:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 if: github.event.label.name == 'cyclops'
 steps:
 - name: Publish event
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/release-chart.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,7 +20,7 @@ jobs:
 release:
 permissions:
 contents: write
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 steps:
 - name: Checkout
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Expand Down

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
ci: use GitHub-hosted runners in fork by michaelmwu · Pull Request #7 · 508-dev/centaur · GitHub
Skip to content
ci: use GitHub-hosted runners in fork#7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

michaelmwu
merged 1 commit into

from

Aug 28, 2026
 Merged


ci: use GitHub-hosted runners in fork
#7
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


1 commit


Select commit


File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


14 changes: 7 additions & 7 deletions
.github/workflows/ci.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -118,7 +118,7 @@ jobs:

 migration-order:
 name: Migration order
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.migration_order == 'true'
 steps:
Expand All@@ -132,7 +132,7 @@ jobs:

 harness-server-checks:
 name: Harness server fmt, clippy, and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.harness_server_checks == 'true'
 steps:
Expand DownExpand Up@@ -163,7 +163,7 @@ jobs:

 rust-api:
 name: Rust API fmt, clippy, and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.rust_api == 'true'
 steps:
Expand DownExpand Up@@ -365,7 +365,7 @@ jobs:

 slackbotv2-tests:
 name: Slackbot v2 tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.slackbotv2_tests == 'true'
 steps:
Expand DownExpand Up@@ -423,7 +423,7 @@ jobs:

 discordbot-checks:
 name: Discordbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.discordbot_checks == 'true'
 steps:
Expand DownExpand Up@@ -457,7 +457,7 @@ jobs:

 githubbot-checks:
 name: Githubbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.githubbot_checks == 'true'
 steps:
Expand DownExpand Up@@ -491,7 +491,7 @@ jobs:

 teamsbot-checks:
 name: Teamsbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.teamsbot_checks == 'true'
 steps:
Expand Down

8 changes: 4 additions & 4 deletions
.github/workflows/console-ci.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -46,119 +46,119 @@
 fi

 scan_ruby:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Scan for common Rails security vulnerabilities using static analysis
 run: bin/brakeman --no-pager

 scan_js:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Scan for security vulnerabilities in JavaScript dependencies
 run: bin/importmap audit

 lint:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'
 env:
 RUBOCOP_CACHE_ROOT: ${{ github.workspace }}/services/console/tmp/rubocop
 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Prepare RuboCop cache
 uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
 env:
 DEPENDENCIES_HASH: ${{ hashFiles('services/console/.ruby-version', 'services/console/**/.rubocop.yml', 'services/console/**/.rubocop_todo.yml', 'services/console/Gemfile.lock') }}
 with:
 path: ${{ env.RUBOCOP_CACHE_ROOT }}
 key: rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-${{ github.ref_name == github.event.repository.default_branch && github.run_id || 'default' }}
 restore-keys: |
 rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-

 - name: Lint code for consistent style
 run: bin/rubocop -f github

 test:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 services:
 postgres:
 image: paradedb/paradedb:0.23.0-pg16
 env:
 POSTGRES_USER: postgres
 POSTGRES_PASSWORD: postgres
 ports:
 - 5432:5432
 options: --health-cmd="pg_isready -U postgres" --health-interval=10s --health-timeout=5s --health-retries=5
 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Install packages
 run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libvips libpq-dev

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Verify migrations match the checked-in schema
 env:
 RAILS_ENV: test
 IRON_CONTROL_DB_HOST: localhost
 IRON_CONTROL_DB_PORT: 5432
 IRON_CONTROL_DB_USERNAME: postgres
 IRON_CONTROL_DB_PASSWORD: postgres
 run: |
 bin/rails db:create db:migrate
 git diff --exit-code -- db/schema.rb

 - name: Run tests
 env:
 RAILS_ENV: test
 IRON_CONTROL_DB_HOST: localhost
 IRON_CONTROL_DB_PORT: 5432
 IRON_CONTROL_DB_USERNAME: postgres
 IRON_CONTROL_DB_PASSWORD: postgres
 # RAILS_MASTER_KEY: ${{ secrets.RAILS_MASTER_KEY }}
 run: bin/rails db:test:prepare test

 console-ci-success:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 name: Console CI success
 runs-on: ubuntu-latest
 if: always()
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/console-gem-audit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -13,7 +13,7 @@ defaults:

jobs:
 scan_gems:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest

 steps:
 - name: Checkout code
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -26,7 +26,7 @@ permissions:
jobs:
 build-and-deploy:
 name: Build and deploy docs
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 timeout-minutes: 20
 strategy:
 matrix:
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/pr-audit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -8,7 +8,7 @@ permissions: {}

jobs:
 publish:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 if: github.event.label.name == 'cyclops'
 steps:
 - name: Publish event
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/release-chart.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,7 +20,7 @@ jobs:
 release:
 permissions:
 contents: write
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 steps:
 - name: Checkout
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Expand Down

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
ci: use GitHub-hosted runners in fork by michaelmwu · Pull Request #7 · 508-dev/centaur · GitHub
Skip to content
ci: use GitHub-hosted runners in fork#7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

michaelmwu
merged 1 commit into

from

Aug 28, 2026
 Merged


ci: use GitHub-hosted runners in fork
#7
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


1 commit


Select commit


File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


14 changes: 7 additions & 7 deletions
.github/workflows/ci.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -118,7 +118,7 @@ jobs:

 migration-order:
 name: Migration order
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.migration_order == 'true'
 steps:
Expand All@@ -132,7 +132,7 @@ jobs:

 harness-server-checks:
 name: Harness server fmt, clippy, and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.harness_server_checks == 'true'
 steps:
Expand DownExpand Up@@ -163,7 +163,7 @@ jobs:

 rust-api:
 name: Rust API fmt, clippy, and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.rust_api == 'true'
 steps:
Expand DownExpand Up@@ -365,7 +365,7 @@ jobs:

 slackbotv2-tests:
 name: Slackbot v2 tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.slackbotv2_tests == 'true'
 steps:
Expand DownExpand Up@@ -423,7 +423,7 @@ jobs:

 discordbot-checks:
 name: Discordbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.discordbot_checks == 'true'
 steps:
Expand DownExpand Up@@ -457,7 +457,7 @@ jobs:

 githubbot-checks:
 name: Githubbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.githubbot_checks == 'true'
 steps:
Expand DownExpand Up@@ -491,7 +491,7 @@ jobs:

 teamsbot-checks:
 name: Teamsbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.teamsbot_checks == 'true'
 steps:
Expand Down

8 changes: 4 additions & 4 deletions
.github/workflows/console-ci.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -46,119 +46,119 @@
 fi

 scan_ruby:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Scan for common Rails security vulnerabilities using static analysis
 run: bin/brakeman --no-pager

 scan_js:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Scan for security vulnerabilities in JavaScript dependencies
 run: bin/importmap audit

 lint:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'
 env:
 RUBOCOP_CACHE_ROOT: ${{ github.workspace }}/services/console/tmp/rubocop
 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Prepare RuboCop cache
 uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
 env:
 DEPENDENCIES_HASH: ${{ hashFiles('services/console/.ruby-version', 'services/console/**/.rubocop.yml', 'services/console/**/.rubocop_todo.yml', 'services/console/Gemfile.lock') }}
 with:
 path: ${{ env.RUBOCOP_CACHE_ROOT }}
 key: rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-${{ github.ref_name == github.event.repository.default_branch && github.run_id || 'default' }}
 restore-keys: |
 rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-

 - name: Lint code for consistent style
 run: bin/rubocop -f github

 test:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 services:
 postgres:
 image: paradedb/paradedb:0.23.0-pg16
 env:
 POSTGRES_USER: postgres
 POSTGRES_PASSWORD: postgres
 ports:
 - 5432:5432
 options: --health-cmd="pg_isready -U postgres" --health-interval=10s --health-timeout=5s --health-retries=5
 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Install packages
 run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libvips libpq-dev

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Verify migrations match the checked-in schema
 env:
 RAILS_ENV: test
 IRON_CONTROL_DB_HOST: localhost
 IRON_CONTROL_DB_PORT: 5432
 IRON_CONTROL_DB_USERNAME: postgres
 IRON_CONTROL_DB_PASSWORD: postgres
 run: |
 bin/rails db:create db:migrate
 git diff --exit-code -- db/schema.rb

 - name: Run tests
 env:
 RAILS_ENV: test
 IRON_CONTROL_DB_HOST: localhost
 IRON_CONTROL_DB_PORT: 5432
 IRON_CONTROL_DB_USERNAME: postgres
 IRON_CONTROL_DB_PASSWORD: postgres
 # RAILS_MASTER_KEY: ${{ secrets.RAILS_MASTER_KEY }}
 run: bin/rails db:test:prepare test

 console-ci-success:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 name: Console CI success
 runs-on: ubuntu-latest
 if: always()
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/console-gem-audit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -13,7 +13,7 @@ defaults:

jobs:
 scan_gems:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest

 steps:
 - name: Checkout code
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -26,7 +26,7 @@ permissions:
jobs:
 build-and-deploy:
 name: Build and deploy docs
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 timeout-minutes: 20
 strategy:
 matrix:
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/pr-audit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -8,7 +8,7 @@ permissions: {}

jobs:
 publish:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 if: github.event.label.name == 'cyclops'
 steps:
 - name: Publish event
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/release-chart.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,7 +20,7 @@ jobs:
 release:
 permissions:
 contents: write
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 steps:
 - name: Checkout
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Expand Down

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '
ci: use GitHub-hosted runners in fork by michaelmwu · Pull Request #7 · 508-dev/centaur · GitHub
Skip to content
ci: use GitHub-hosted runners in fork#7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

michaelmwu
merged 1 commit into

from

Aug 28, 2026
 Merged


ci: use GitHub-hosted runners in fork
#7
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


1 commit


Select commit


File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


14 changes: 7 additions & 7 deletions
.github/workflows/ci.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -118,7 +118,7 @@ jobs:

 migration-order:
 name: Migration order
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.migration_order == 'true'
 steps:
Expand All@@ -132,7 +132,7 @@ jobs:

 harness-server-checks:
 name: Harness server fmt, clippy, and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.harness_server_checks == 'true'
 steps:
Expand DownExpand Up@@ -163,7 +163,7 @@ jobs:

 rust-api:
 name: Rust API fmt, clippy, and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.rust_api == 'true'
 steps:
Expand DownExpand Up@@ -365,7 +365,7 @@ jobs:

 slackbotv2-tests:
 name: Slackbot v2 tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.slackbotv2_tests == 'true'
 steps:
Expand DownExpand Up@@ -423,7 +423,7 @@ jobs:

 discordbot-checks:
 name: Discordbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.discordbot_checks == 'true'
 steps:
Expand DownExpand Up@@ -457,7 +457,7 @@ jobs:

 githubbot-checks:
 name: Githubbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.githubbot_checks == 'true'
 steps:
Expand DownExpand Up@@ -491,7 +491,7 @@ jobs:

 teamsbot-checks:
 name: Teamsbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.teamsbot_checks == 'true'
 steps:
Expand Down

8 changes: 4 additions & 4 deletions
.github/workflows/console-ci.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -46,119 +46,119 @@
 fi

 scan_ruby:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Scan for common Rails security vulnerabilities using static analysis
 run: bin/brakeman --no-pager

 scan_js:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Scan for security vulnerabilities in JavaScript dependencies
 run: bin/importmap audit

 lint:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'
 env:
 RUBOCOP_CACHE_ROOT: ${{ github.workspace }}/services/console/tmp/rubocop
 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Prepare RuboCop cache
 uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
 env:
 DEPENDENCIES_HASH: ${{ hashFiles('services/console/.ruby-version', 'services/console/**/.rubocop.yml', 'services/console/**/.rubocop_todo.yml', 'services/console/Gemfile.lock') }}
 with:
 path: ${{ env.RUBOCOP_CACHE_ROOT }}
 key: rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-${{ github.ref_name == github.event.repository.default_branch && github.run_id || 'default' }}
 restore-keys: |
 rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-

 - name: Lint code for consistent style
 run: bin/rubocop -f github

 test:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 services:
 postgres:
 image: paradedb/paradedb:0.23.0-pg16
 env:
 POSTGRES_USER: postgres
 POSTGRES_PASSWORD: postgres
 ports:
 - 5432:5432
 options: --health-cmd="pg_isready -U postgres" --health-interval=10s --health-timeout=5s --health-retries=5
 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Install packages
 run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libvips libpq-dev

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Verify migrations match the checked-in schema
 env:
 RAILS_ENV: test
 IRON_CONTROL_DB_HOST: localhost
 IRON_CONTROL_DB_PORT: 5432
 IRON_CONTROL_DB_USERNAME: postgres
 IRON_CONTROL_DB_PASSWORD: postgres
 run: |
 bin/rails db:create db:migrate
 git diff --exit-code -- db/schema.rb

 - name: Run tests
 env:
 RAILS_ENV: test
 IRON_CONTROL_DB_HOST: localhost
 IRON_CONTROL_DB_PORT: 5432
 IRON_CONTROL_DB_USERNAME: postgres
 IRON_CONTROL_DB_PASSWORD: postgres
 # RAILS_MASTER_KEY: ${{ secrets.RAILS_MASTER_KEY }}
 run: bin/rails db:test:prepare test

 console-ci-success:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 name: Console CI success
 runs-on: ubuntu-latest
 if: always()
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/console-gem-audit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -13,7 +13,7 @@ defaults:

jobs:
 scan_gems:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest

 steps:
 - name: Checkout code
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -26,7 +26,7 @@ permissions:
jobs:
 build-and-deploy:
 name: Build and deploy docs
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 timeout-minutes: 20
 strategy:
 matrix:
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/pr-audit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -8,7 +8,7 @@ permissions: {}

jobs:
 publish:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 if: github.event.label.name == 'cyclops'
 steps:
 - name: Publish event
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/release-chart.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,7 +20,7 @@ jobs:
 release:
 permissions:
 contents: write
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 steps:
 - name: Checkout
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Expand Down

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
ci: use GitHub-hosted runners in fork by michaelmwu · Pull Request #7 · 508-dev/centaur · GitHub
Skip to content
ci: use GitHub-hosted runners in fork#7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

michaelmwu
merged 1 commit into

from

Aug 28, 2026
 Merged


ci: use GitHub-hosted runners in fork
#7
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


1 commit


Select commit


File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


14 changes: 7 additions & 7 deletions
.github/workflows/ci.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -118,7 +118,7 @@ jobs:

 migration-order:
 name: Migration order
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.migration_order == 'true'
 steps:
Expand All@@ -132,7 +132,7 @@ jobs:

 harness-server-checks:
 name: Harness server fmt, clippy, and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.harness_server_checks == 'true'
 steps:
Expand DownExpand Up@@ -163,7 +163,7 @@ jobs:

 rust-api:
 name: Rust API fmt, clippy, and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.rust_api == 'true'
 steps:
Expand DownExpand Up@@ -365,7 +365,7 @@ jobs:

 slackbotv2-tests:
 name: Slackbot v2 tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.slackbotv2_tests == 'true'
 steps:
Expand DownExpand Up@@ -423,7 +423,7 @@ jobs:

 discordbot-checks:
 name: Discordbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.discordbot_checks == 'true'
 steps:
Expand DownExpand Up@@ -457,7 +457,7 @@ jobs:

 githubbot-checks:
 name: Githubbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.githubbot_checks == 'true'
 steps:
Expand DownExpand Up@@ -491,7 +491,7 @@ jobs:

 teamsbot-checks:
 name: Teamsbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.teamsbot_checks == 'true'
 steps:
Expand Down

8 changes: 4 additions & 4 deletions
.github/workflows/console-ci.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -46,119 +46,119 @@
 fi

 scan_ruby:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Scan for common Rails security vulnerabilities using static analysis
 run: bin/brakeman --no-pager

 scan_js:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Scan for security vulnerabilities in JavaScript dependencies
 run: bin/importmap audit

 lint:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'
 env:
 RUBOCOP_CACHE_ROOT: ${{ github.workspace }}/services/console/tmp/rubocop
 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Prepare RuboCop cache
 uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
 env:
 DEPENDENCIES_HASH: ${{ hashFiles('services/console/.ruby-version', 'services/console/**/.rubocop.yml', 'services/console/**/.rubocop_todo.yml', 'services/console/Gemfile.lock') }}
 with:
 path: ${{ env.RUBOCOP_CACHE_ROOT }}
 key: rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-${{ github.ref_name == github.event.repository.default_branch && github.run_id || 'default' }}
 restore-keys: |
 rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-

 - name: Lint code for consistent style
 run: bin/rubocop -f github

 test:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 services:
 postgres:
 image: paradedb/paradedb:0.23.0-pg16
 env:
 POSTGRES_USER: postgres
 POSTGRES_PASSWORD: postgres
 ports:
 - 5432:5432
 options: --health-cmd="pg_isready -U postgres" --health-interval=10s --health-timeout=5s --health-retries=5
 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Install packages
 run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libvips libpq-dev

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Verify migrations match the checked-in schema
 env:
 RAILS_ENV: test
 IRON_CONTROL_DB_HOST: localhost
 IRON_CONTROL_DB_PORT: 5432
 IRON_CONTROL_DB_USERNAME: postgres
 IRON_CONTROL_DB_PASSWORD: postgres
 run: |
 bin/rails db:create db:migrate
 git diff --exit-code -- db/schema.rb

 - name: Run tests
 env:
 RAILS_ENV: test
 IRON_CONTROL_DB_HOST: localhost
 IRON_CONTROL_DB_PORT: 5432
 IRON_CONTROL_DB_USERNAME: postgres
 IRON_CONTROL_DB_PASSWORD: postgres
 # RAILS_MASTER_KEY: ${{ secrets.RAILS_MASTER_KEY }}
 run: bin/rails db:test:prepare test

 console-ci-success:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 name: Console CI success
 runs-on: ubuntu-latest
 if: always()
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/console-gem-audit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -13,7 +13,7 @@ defaults:

jobs:
 scan_gems:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest

 steps:
 - name: Checkout code
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -26,7 +26,7 @@ permissions:
jobs:
 build-and-deploy:
 name: Build and deploy docs
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 timeout-minutes: 20
 strategy:
 matrix:
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/pr-audit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -8,7 +8,7 @@ permissions: {}

jobs:
 publish:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 if: github.event.label.name == 'cyclops'
 steps:
 - name: Publish event
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/release-chart.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,7 +20,7 @@ jobs:
 release:
 permissions:
 contents: write
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 steps:
 - name: Checkout
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Expand Down

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
ci: use GitHub-hosted runners in fork by michaelmwu · Pull Request #7 · 508-dev/centaur · GitHub
Skip to content
ci: use GitHub-hosted runners in fork#7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

michaelmwu
merged 1 commit into

from

Aug 28, 2026
 Merged


ci: use GitHub-hosted runners in fork
#7
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


1 commit


Select commit


File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


14 changes: 7 additions & 7 deletions
.github/workflows/ci.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -118,7 +118,7 @@ jobs:

 migration-order:
 name: Migration order
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.migration_order == 'true'
 steps:
Expand All@@ -132,7 +132,7 @@ jobs:

 harness-server-checks:
 name: Harness server fmt, clippy, and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.harness_server_checks == 'true'
 steps:
Expand DownExpand Up@@ -163,7 +163,7 @@ jobs:

 rust-api:
 name: Rust API fmt, clippy, and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.rust_api == 'true'
 steps:
Expand DownExpand Up@@ -365,7 +365,7 @@ jobs:

 slackbotv2-tests:
 name: Slackbot v2 tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.slackbotv2_tests == 'true'
 steps:
Expand DownExpand Up@@ -423,7 +423,7 @@ jobs:

 discordbot-checks:
 name: Discordbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.discordbot_checks == 'true'
 steps:
Expand DownExpand Up@@ -457,7 +457,7 @@ jobs:

 githubbot-checks:
 name: Githubbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.githubbot_checks == 'true'
 steps:
Expand DownExpand Up@@ -491,7 +491,7 @@ jobs:

 teamsbot-checks:
 name: Teamsbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.teamsbot_checks == 'true'
 steps:
Expand Down

8 changes: 4 additions & 4 deletions
.github/workflows/console-ci.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -46,119 +46,119 @@
 fi

 scan_ruby:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Scan for common Rails security vulnerabilities using static analysis
 run: bin/brakeman --no-pager

 scan_js:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Scan for security vulnerabilities in JavaScript dependencies
 run: bin/importmap audit

 lint:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'
 env:
 RUBOCOP_CACHE_ROOT: ${{ github.workspace }}/services/console/tmp/rubocop
 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Prepare RuboCop cache
 uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
 env:
 DEPENDENCIES_HASH: ${{ hashFiles('services/console/.ruby-version', 'services/console/**/.rubocop.yml', 'services/console/**/.rubocop_todo.yml', 'services/console/Gemfile.lock') }}
 with:
 path: ${{ env.RUBOCOP_CACHE_ROOT }}
 key: rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-${{ github.ref_name == github.event.repository.default_branch && github.run_id || 'default' }}
 restore-keys: |
 rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-

 - name: Lint code for consistent style
 run: bin/rubocop -f github

 test:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 services:
 postgres:
 image: paradedb/paradedb:0.23.0-pg16
 env:
 POSTGRES_USER: postgres
 POSTGRES_PASSWORD: postgres
 ports:
 - 5432:5432
 options: --health-cmd="pg_isready -U postgres" --health-interval=10s --health-timeout=5s --health-retries=5
 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Install packages
 run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libvips libpq-dev

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Verify migrations match the checked-in schema
 env:
 RAILS_ENV: test
 IRON_CONTROL_DB_HOST: localhost
 IRON_CONTROL_DB_PORT: 5432
 IRON_CONTROL_DB_USERNAME: postgres
 IRON_CONTROL_DB_PASSWORD: postgres
 run: |
 bin/rails db:create db:migrate
 git diff --exit-code -- db/schema.rb

 - name: Run tests
 env:
 RAILS_ENV: test
 IRON_CONTROL_DB_HOST: localhost
 IRON_CONTROL_DB_PORT: 5432
 IRON_CONTROL_DB_USERNAME: postgres
 IRON_CONTROL_DB_PASSWORD: postgres
 # RAILS_MASTER_KEY: ${{ secrets.RAILS_MASTER_KEY }}
 run: bin/rails db:test:prepare test

 console-ci-success:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 name: Console CI success
 runs-on: ubuntu-latest
 if: always()
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/console-gem-audit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -13,7 +13,7 @@ defaults:

jobs:
 scan_gems:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest

 steps:
 - name: Checkout code
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -26,7 +26,7 @@ permissions:
jobs:
 build-and-deploy:
 name: Build and deploy docs
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 timeout-minutes: 20
 strategy:
 matrix:
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/pr-audit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -8,7 +8,7 @@ permissions: {}

jobs:
 publish:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 if: github.event.label.name == 'cyclops'
 steps:
 - name: Publish event
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/release-chart.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,7 +20,7 @@ jobs:
 release:
 permissions:
 contents: write
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 steps:
 - name: Checkout
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Expand Down

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Universal Dark Mode - works on any site
(function() {
var enabled = true;
function applyDarkMode() {
if (!enabled) return;
// Create style element if it doesn't exist
var style = document.getElementById('universal-dark-mode-style');
if (!style) {
style = document.createElement('style');
style.id = 'universal-dark-mode-style';
document.head.appendChild(style);
}
// Dark mode CSS - inverts colors but preserves images/video
style.textContent = '
/* Invert everything except media */
html {
filter: invert(1) hue-rotate(180deg) !important;
background: #1a1a2e !important;
}
/* Restore images, videos, iframes, canvas */
img, video, iframe, canvas, svg, picture, [style*="background-image"] {
filter: invert(1) hue-rotate(180deg) !important;
}
/* Preserve specific elements that should not be inverted */
.no-dark-mode, .no-dark-mode *,
[data-theme="light"], [data-theme="light"],
.ace_editor, .ace_editor *,
.CodeMirror, .CodeMirror *,
.monaco-editor, .monaco-editor *,
.markdown-body pre, .markdown-body pre *,
.highlight, .highlight *,
pre code, pre code * {
filter: none !important;
}
/* Fix common UI elements */
.modal, .popup, .dropdown-menu, .tooltip, .popover {
filter: invert(1) hue-rotate(180deg) !important;
background: #2d2d44 !important;
border-color: #444 !important;
}
/* Scrollbars */
::-webkit-scrollbar { background: #1a1a2e !important; }
::-webkit-scrollbar-thumb { background: #444 !important; }
::-webkit-scrollbar-thumb:hover { background: #555 !important; }
/* Selection */
::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
';
}
function removeDarkMode() {
var style = document.getElementById('universal-dark-mode-style');
if (style) style.remove();
}
// Toggle with Alt+Shift+D
document.addEventListener('keydown', function(e) {
if (e.altKey && e.shiftKey && e.key === 'D') {
e.preventDefault();
enabled = !enabled;
if (enabled) {
applyDarkMode();
console.log('[Universal Dark Mode] Enabled');
} else {
removeDarkMode();
console.log('[Universal Dark Mode] Disabled');
}
}
});
// Apply on load
applyDarkMode();
// Re-apply on dynamic content
var observer = new MutationObserver(function(mutations) {
if (enabled && !document.getElementById('universal-dark-mode-style')) {
applyDarkMode();
}
});
observer.observe(document.head, { childList: true });
console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');
})();
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();
ci: use GitHub-hosted runners in fork by michaelmwu · Pull Request #7 · 508-dev/centaur · GitHub
Skip to content
ci: use GitHub-hosted runners in fork#7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

michaelmwu
merged 1 commit into

from

Aug 28, 2026
 Merged


ci: use GitHub-hosted runners in fork
#7
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


1 commit


Select commit


File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


14 changes: 7 additions & 7 deletions
.github/workflows/ci.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -118,7 +118,7 @@ jobs:

 migration-order:
 name: Migration order
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.migration_order == 'true'
 steps:
Expand All@@ -132,7 +132,7 @@ jobs:

 harness-server-checks:
 name: Harness server fmt, clippy, and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.harness_server_checks == 'true'
 steps:
Expand DownExpand Up@@ -163,7 +163,7 @@ jobs:

 rust-api:
 name: Rust API fmt, clippy, and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.rust_api == 'true'
 steps:
Expand DownExpand Up@@ -365,7 +365,7 @@ jobs:

 slackbotv2-tests:
 name: Slackbot v2 tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.slackbotv2_tests == 'true'
 steps:
Expand DownExpand Up@@ -423,7 +423,7 @@ jobs:

 discordbot-checks:
 name: Discordbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.discordbot_checks == 'true'
 steps:
Expand DownExpand Up@@ -457,7 +457,7 @@ jobs:

 githubbot-checks:
 name: Githubbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.githubbot_checks == 'true'
 steps:
Expand DownExpand Up@@ -491,7 +491,7 @@ jobs:

 teamsbot-checks:
 name: Teamsbot typecheck and tests
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: ci_changes
 if: needs.ci_changes.outputs.teamsbot_checks == 'true'
 steps:
Expand Down

8 changes: 4 additions & 4 deletions
.github/workflows/console-ci.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -46,119 +46,119 @@
 fi

 scan_ruby:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Scan for common Rails security vulnerabilities using static analysis
 run: bin/brakeman --no-pager

 scan_js:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Scan for security vulnerabilities in JavaScript dependencies
 run: bin/importmap audit

 lint:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'
 env:
 RUBOCOP_CACHE_ROOT: ${{ github.workspace }}/services/console/tmp/rubocop
 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Prepare RuboCop cache
 uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
 env:
 DEPENDENCIES_HASH: ${{ hashFiles('services/console/.ruby-version', 'services/console/**/.rubocop.yml', 'services/console/**/.rubocop_todo.yml', 'services/console/Gemfile.lock') }}
 with:
 path: ${{ env.RUBOCOP_CACHE_ROOT }}
 key: rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-${{ github.ref_name == github.event.repository.default_branch && github.run_id || 'default' }}
 restore-keys: |
 rubocop-${{ runner.os }}-${{ env.DEPENDENCIES_HASH }}-

 - name: Lint code for consistent style
 run: bin/rubocop -f github

 test:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 needs: console_changes
 if: needs.console_changes.outputs.relevant == 'true'

 services:
 postgres:
 image: paradedb/paradedb:0.23.0-pg16
 env:
 POSTGRES_USER: postgres
 POSTGRES_PASSWORD: postgres
 ports:
 - 5432:5432
 options: --health-cmd="pg_isready -U postgres" --health-interval=10s --health-timeout=5s --health-retries=5
 steps:
 - name: Checkout code
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

 - name: Install packages
 run: sudo apt-get update && sudo apt-get install --no-install-recommends -y libvips libpq-dev

 - name: Set up Ruby
 uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0
 with:
 working-directory: services/console
 bundler-cache: true

 - name: Verify migrations match the checked-in schema
 env:
 RAILS_ENV: test
 IRON_CONTROL_DB_HOST: localhost
 IRON_CONTROL_DB_PORT: 5432
 IRON_CONTROL_DB_USERNAME: postgres
 IRON_CONTROL_DB_PASSWORD: postgres
 run: |
 bin/rails db:create db:migrate
 git diff --exit-code -- db/schema.rb

 - name: Run tests
 env:
 RAILS_ENV: test
 IRON_CONTROL_DB_HOST: localhost
 IRON_CONTROL_DB_PORT: 5432
 IRON_CONTROL_DB_USERNAME: postgres
 IRON_CONTROL_DB_PASSWORD: postgres
 # RAILS_MASTER_KEY: ${{ secrets.RAILS_MASTER_KEY }}
 run: bin/rails db:test:prepare test

 console-ci-success:

Check warning

Code scanning / CodeQL


Workflow does not contain permissions

Medium


Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

 name: Console CI success
 runs-on: ubuntu-latest
 if: always()
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/console-gem-audit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -13,7 +13,7 @@ defaults:

jobs:
 scan_gems:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest

 steps:
 - name: Checkout code
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -26,7 +26,7 @@ permissions:
jobs:
 build-and-deploy:
 name: Build and deploy docs
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 timeout-minutes: 20
 strategy:
 matrix:
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/pr-audit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -8,7 +8,7 @@ permissions: {}

jobs:
 publish:
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 if: github.event.label.name == 'cyclops'
 steps:
 - name: Publish event
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/release-chart.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,7 +20,7 @@ jobs:
 release:
 permissions:
 contents: write
 runs-on: depot-ubuntu-24.04-16
 runs-on: ubuntu-latest
 steps:
 - name: Checkout
 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Expand Down