agent/codex
1
0
Fork 0
mirror of https://github.com/pchuan98/codex.git synced 2026-07-01 00:31:56 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
e64b469bbcf2c2a6bb575ef0a58368f02147e899
codex/.github/workflows
T
Shijie Rao c3fcb0e745 Use Azure artifact signing environment secrets (#25945) 
## Why
Windows release signing should read Azure signing credentials from the
`azure-artifact-signing` environment instead of the old repo-level
`AZURE_TRUSTED_SIGNING_*` names. The smoke runs confirmed the
environment secrets resolve with the new `AZURE_ARTIFACT_SIGNING_*`
names once the Windows signing job is attached to that environment.

## What Changed
- Put the real Windows signing job in the `azure-artifact-signing`
environment.
- Switch the Windows signing action inputs from
`AZURE_TRUSTED_SIGNING_*` to `AZURE_ARTIFACT_SIGNING_*`.
- Drop the obsolete `workflow_call.secrets` declarations for the old
repo-level secret names; the caller continues to use `secrets: inherit`.
- Remove the temporary branch-trigger and Windows-only smoke-test
workflow changes before finalizing this PR.

## Validation
- `git diff --check -- .github/workflows/rust-release.yml
.github/workflows/rust-release-windows.yml`
- `ruby -e 'require "yaml"; ARGV.each { |f| YAML.load_file(f); puts
"yaml ok: #{f}" }' .github/workflows/rust-release.yml
.github/workflows/rust-release-windows.yml`
c3fcb0e745 ยท 2026-06-04 12:24:26 -07:00
History
..
bazel.yml
[codex] Fix Windows BuildBuddy Bazel wrapper execution (#25915)
2026-06-02 16:22:32 -07:00
blob-size-policy.yml
ci: check out PR head commits in workflows (#21835)
2026-05-08 15:14:33 -07:00
cargo-deny.yml
[codex] Use git CLI for Cargo fetches across Rust workflows (#25775)
2026-06-02 07:39:41 -07:00
ci.yml
[codex] Add comprehensive root formatting check (#25683)
2026-06-02 01:20:25 +00:00
cla.yml
[codex] Pin GitHub Actions workflow references (#15828)
2026-03-27 23:00:05 +00:00
close-stale-contributor-prs.yml
[codex] Fully qualify hash-pins in GitHub Actions (#21436)
2026-05-07 14:31:20 -07:00
codespell.yml
ci: check out PR head commits in workflows (#21835)
2026-05-08 15:14:33 -07:00
Dockerfile.bazel
Remove js_repl feature (#19410)
2026-04-24 17:49:29 -07:00
issue-deduplicator.yml
ci: use issue triage environment for issue workflows (#25134)
2026-05-29 12:06:55 -07:00
issue-labeler.yml
ci: use issue triage environment for issue workflows (#25134)
2026-05-29 12:06:55 -07:00
python-runtime-build.yml
[codex] Split Python runtime release workflow (#26226)
2026-06-03 14:29:52 -07:00
python-runtime-release.yml
[codex] Split Python runtime release workflow (#26226)
2026-06-03 14:29:52 -07:00
python-sdk-release.yml
[codex] Split Python runtime release workflow (#26226)
2026-06-03 14:29:52 -07:00
README.md
Fan out rust-ci-full nextest by platform (#23358)
2026-05-19 17:54:41 -07:00
rust-ci-full-nextest-platform.yml
Uprev Rust toolchain pins to 1.95.0 (#24684)
2026-05-26 20:59:47 -07:00
rust-ci-full.yml
Revert "Add app-server startup benchmark crate" (#24937)
2026-05-28 17:49:41 +00:00
rust-ci.yml
[codex] Use git CLI for Cargo fetches across Rust workflows (#25775)
2026-06-02 07:39:41 -07:00
rust-release-argument-comment-lint.yml
[codex] Use git CLI for Cargo fetches across Rust workflows (#25775)
2026-06-02 07:39:41 -07:00
rust-release-prepare.yml
make rust-release-prepare use env secret (#22702)
2026-05-14 21:45:53 +00:00
rust-release-windows.yml
Use Azure artifact signing environment secrets (#25945)
2026-06-04 12:24:26 -07:00
rust-release-zsh.yml
release: build macOS x64 zsh artifact (#24165)
2026-05-22 17:08:59 -07:00
rust-release.yml
ci: sign macOS release artifacts with Azure Key Vault (#26252)
2026-06-03 20:34:51 -07:00
rusty-v8-release.yml
[codex] Fix Windows BuildBuddy Bazel wrapper execution (#25915)
2026-06-02 16:22:32 -07:00
sdk.yml
[codex] Pin Python SDK to glibc-compatible runtime (#25907)
2026-06-02 12:27:01 -07:00
v8-canary.yml
[codex] Fix Windows BuildBuddy Bazel wrapper execution (#25915)
2026-06-02 16:22:32 -07:00
zstd
ci(windows): use DotSlash for zstd in rust-release-windows (#11542)
2026-02-11 20:57:11 -08:00

README.md

Workflow Strategy

The workflows in this directory are split so that pull requests get fast, review-friendly signal while main still gets the full cross-platform verification pass.

Pull Requests

  • bazel.yml is the main pre-merge verification path for Rust code. It runs Bazel test and Bazel clippy on the supported Bazel targets, including the generated Rust test binaries needed to lint inline #[cfg(test)] code.
  • rust-ci.yml keeps the Cargo-native PR checks intentionally small:
    • cargo fmt --check
    • cargo shear
    • argument-comment-lint on Linux, macOS, and Windows
    • tools/argument-comment-lint package tests when the lint or its workflow wiring changes

Post-Merge On main

  • bazel.yml also runs on pushes to main. This re-verifies the merged Bazel path and helps keep the BuildBuddy caches warm.
  • rust-ci-full.yml is the full Cargo-native verification workflow. It keeps the heavier checks off the PR path while still validating them after merge:
    • the full Cargo clippy matrix
    • the full Cargo nextest matrix via per-platform archive-backed shards
    • Windows ARM64 nextest archives cross-compiled on Windows x64, then replayed on native Windows ARM64 shards
    • release-profile Cargo builds
    • cross-platform argument-comment-lint
    • Linux remote-env tests

Rule Of Thumb

  • If a build/test/clippy check can be expressed in Bazel, prefer putting the PR-time version in bazel.yml.
  • Keep rust-ci.yml fast enough that it usually does not dominate PR latency.
  • Reserve rust-ci-full.yml for heavyweight Cargo-native coverage that Bazel does not replace yet.
Reference in New Issue View Git Blame Copy Permalink