Skip to content

ci: Add ort#93

Merged
timo-reymann merged 34 commits into
mainfrom
ci/add-ort
Feb 17, 2026
Merged

ci: Add ort#93
timo-reymann merged 34 commits into
mainfrom
ci/add-ort

Conversation

@timo-reymann
Copy link
Copy Markdown
Owner

Relates OR Closes #0000

Description

@codecov
Copy link
Copy Markdown

codecov Bot commented Feb 17, 2026

Codecov Report

❌ Patch coverage is 33.33333% with 4 lines in your changes missing coverage. Please review.
✅ Project coverage is 87.19%. Comparing base (d10eb87) to head (fa9356d).
⚠️ Report is 1 commits behind head on main.

Files with missing lines Patch % Lines
pkg/cli/configuration.go 40.00% 2 Missing and 1 partial ⚠️
main.go 0.00% 1 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main      #93      +/-   ##
==========================================
- Coverage   87.87%   87.19%   -0.69%     
==========================================
  Files          21       21              
  Lines         363      367       +4     
==========================================
+ Hits          319      320       +1     
- Misses         27       29       +2     
- Partials       17       18       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

timo-reymann and others added 11 commits February 17, 2026 10:21
Pre-create output directories and run containers as host user
to avoid permission errors writing to mounted volumes.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Run as the container ort user instead of overriding with -u flag,
mount cache to /home/ort/.ort, and chmod output dirs so the container
user can write to them.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Remove copyleft warning rules as all projects are open source.
Detect root license from scan results at script load time instead
of using projectSourceGetDetectedLicensesByFilePath in packageRule.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Use full SPDX identifiers (GPL-3.0-only etc.) as preset keys so they
match what ORT detects. Move license check from require block (which
only accepts RuleMatcher objects) to an if guard.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add .ort.yml with curations for false positive license detections in
CONTRIBUTING.md (GPL-1.0-or-later, NOASSERTION). Use correct SPDX
identifiers in LicensePresets and replace generic howToFix messages
with actionable guidance.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
timo-reymann and others added 7 commits February 17, 2026 11:45
The ORT Docker image runs as non-root by default, but GitHub Actions
runner mounts temp directories with root-only write permissions.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Checks ClearlyDefined for existing scan results before running scans,
reducing scan time for known open source components.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Repository owner deleted a comment from github-actions Bot Feb 17, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Feb 17, 2026

License Compliance — ✅ passed

I am using ORT to check for license compliance for added / modified library code. This helps adhering to license terms.

Reports

View full run

@timo-reymann timo-reymann marked this pull request as ready for review February 17, 2026 19:02
@sonarqubecloud
Copy link
Copy Markdown

@timo-reymann timo-reymann merged commit 9ef9e98 into main Feb 17, 2026
7 of 9 checks passed
@timo-reymann timo-reymann deleted the ci/add-ort branch February 17, 2026 19:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant