refactor(ci): rewire workflows to call build-logic reusables [DAT-22876]#539

Merged

jandroav merged 25 commits into

mainfrom

dat-22876-extract-reusable-docker-workflows

Apr 21, 2026

Commits on Apr 20, 2026

refactor(ci): rewire workflows to call build-logic reusable-docker-* workflows
jandroav
committed
Merge branch 'main' into dat-22876-extract-reusable-docker-workflows
jandroav
authored

Commits on Apr 21, 2026

Merge branch 'main' into dat-22876-extract-reusable-docker-workflows
jandroav
authored
feat(ci): expose dry_run input on README publish workflow_dispatch
jandroav
committed
fix(ci): grant contents:read to publish-oss-readme caller
jandroav
committed
refactor(ci): split build-qa-docker into explicit named jobs
jandroav
committed
fix(ci): remove ternary expressions from reusable with: blocks
jandroav
committed
fix(ci): replace contains(fromJSON()) with explicit OR conditions in if: gates
jandroav
committed
fix(ci): simplify vuln-scan-secure needs chain to isolate startup_failure
jandroav
committed
fix(ci): move buildTargets gate to set-matrix outputs, use needs.* in if:
jandroav
committed
fix(ci): try bare expression syntax in if: for reusable caller jobs
jandroav
committed
debug(ci): minimal single reusable job to isolate startup_failure
jandroav
committed
debug(ci): needs + if + reusable test
jandroav
committed
debug(ci): test all 3 build jobs without vuln-scan
jandroav
committed
debug(ci): test 3 build + 3 vuln-scan jobs without cleanup
jandroav
committed
debug(ci): test vuln-scan with @dat-22876-reusables instead of @main
jandroav
committed
debug(ci): use string if: on vuln-scan jobs
jandroav
committed
debug(ci): remove if: from vuln-scan jobs entirely
jandroav
committed
debug(ci): 3 build + 1 vuln-scan only
jandroav
committed
debug(ci): 3 parallel build (no if/needs) + 1 vuln-scan
jandroav
committed
debug(ci): test reusable-caller -> reusable-caller chain (same reusable)
jandroav
committed
debug(ci): test vuln-scan@main after reusable-caller chain
jandroav
committed
debug(ci): add security-events:write permission (required by vuln-scan reusable)
jandroav
committed
refactor(ci): complete split into explicit named jobs with security-events:write
jandroav
committed
refactor(ci): pin reusable workflow refs to @main after build-logic merge
jandroav
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

refactor(ci): rewire workflows to call build-logic reusables [DAT-22876]#539

refactor(ci): rewire workflows to call build-logic reusables [DAT-22876]#539
jandroav merged 25 commits into
mainfrom
dat-22876-extract-reusable-docker-workflows

Commits on Apr 20, 2026

refactor(ci): rewire workflows to call build-logic reusable-docker-* workflows

Merge branch 'main' into dat-22876-extract-reusable-docker-workflows

Commits on Apr 21, 2026

Merge branch 'main' into dat-22876-extract-reusable-docker-workflows

feat(ci): expose dry_run input on README publish workflow_dispatch

fix(ci): grant contents:read to publish-oss-readme caller

refactor(ci): split build-qa-docker into explicit named jobs

fix(ci): remove ternary expressions from reusable with: blocks

fix(ci): replace contains(fromJSON()) with explicit OR conditions in if: gates

fix(ci): simplify vuln-scan-secure needs chain to isolate startup_failure

fix(ci): move buildTargets gate to set-matrix outputs, use needs.* in if:

fix(ci): try bare expression syntax in if: for reusable caller jobs

debug(ci): minimal single reusable job to isolate startup_failure

debug(ci): needs + if + reusable test

debug(ci): test all 3 build jobs without vuln-scan

debug(ci): test 3 build + 3 vuln-scan jobs without cleanup

debug(ci): test vuln-scan with @dat-22876-reusables instead of @main

debug(ci): use string if: on vuln-scan jobs

debug(ci): remove if: from vuln-scan jobs entirely

debug(ci): 3 build + 1 vuln-scan only

debug(ci): 3 parallel build (no if/needs) + 1 vuln-scan

debug(ci): test reusable-caller -> reusable-caller chain (same reusable)

debug(ci): test vuln-scan@main after reusable-caller chain

debug(ci): add security-events:write permission (required by vuln-scan reusable)

refactor(ci): complete split into explicit named jobs with security-events:write

refactor(ci): pin reusable workflow refs to @main after build-logic merge