php-devops/TODO.md
2026-01-31 22:50:27 +00:00

1.6 KiB
Raw Blame History

TODO - Session Summary 2026-01-31

Completed Today

GitHub Org Setup

  • Dev branches as default (all repos)
  • Labels taxonomy (agent:, priority:, type:, lang:)
  • Discord webhooks (7 channels × 20 repos)
  • Branch protection rules
  • Org security defaults enabled

CodeRabbit

  • Central config: host-uk/coderabbit
  • Per-repo .coderabbit.yaml (21 repos)
  • review_status: false

CodeQL/Security

  • Enabled on all public repos
  • Language-appropriate scanning

GitHub Projects

  • Auto-add workflow (label → project)
  • PROJECT_TOKEN secret set

Agent Verification Workflow

  • Labels: agent:ready → agent:wip → agent:review → verified
  • Self-verification blocked
  • core/.github/workflows/agent-verify.yml

Template Repo (core-devops)

  • Bootstrap workflow for new repos
  • TEMPLATE_SETUP.md guide

Free Tier Integration

  • Gemini, Groq, Mistral, Cohere, Cloudflare workflows
  • Semgrep, Trivy, Gitleaks, OSV, Checkov
  • Jules dispatch workflow
  • CONTRIBUTING.md + scripts/contribute.sh

Docs

  • VitePress setup
  • core docs sync tested
  • free-tier-services.md

🔲 Pending (Core CLI Issues Created)

  • #46 - docs sync ignores packages_dir
  • #47 - core qa command area
  • #48 - core security command
  • #49 - core monitor (aggregate free tier findings)

🔲 Next Steps

  • Merge dev → main on repos to deploy docs
  • Recruit first 10 contributors
  • Rotate PROJECT_TOKEN (was shared in chat)
  • Add workflow to remaining PHP repos (8 repos)
  • Set up external OSS project scanning