Skip to content

Conversation

@rbarker-dev
Copy link
Contributor

@rbarker-dev rbarker-dev commented Nov 19, 2025

Description

This pull request significantly enhances the GitHub Actions workflow and documentation for the composite action. The workflow in .github/workflows/test.yml is refactored to provide comprehensive, modular testing for each supported language and tool, adds security hardening, and improves output verification. The README.md is rewritten for clarity, completeness, and up-to-date usage instructions, including detailed input/output tables and new examples.

Workflow improvements and modularization:

  • Refactored .github/workflows/test.yml to split testing into separate jobs for each supported language/tool (Node.js, Python, Java, Gradle, Go, Rust, Swift, and repository checkout), enabling more granular and maintainable CI. Each job now verifies relevant outputs for its setup.
  • Added Step Security's Harden Runner to every job for improved security posture by auditing outbound network traffic.
  • Updated triggers for the workflow to run on additional pull request events (converted_to_draft, ready_for_review, etc.) and removed less relevant branches from triggers.

Documentation and usage clarity:

  • Overhauled README.md to provide a clearer project description, highlight security features, and enumerate all supported languages and tools.
  • Added comprehensive input and output tables for each language/tool, making it much easier for users to understand configuration options and expected outputs.
  • Replaced and expanded example usage sections with modern, concise YAML snippets for common scenarios (Node.js, Java+Gradle, Python, multi-language).
  • Updated license section to reference Apache 2.0 explicitly.

These changes make the composite action easier to adopt, more secure, and much more maintainable for future development.

References: [1] [2]

Related Issue(s)

Closes #2

Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR significantly expands the GitHub Action to support multiple programming languages and build tools, adding comprehensive test coverage and modernizing the configuration. The changes introduce support for Gradle, Rust, and Swift alongside the existing Node.js, Python, Java, and Go toolchains.

Key changes:

  • Added support for Gradle, Rust, and Swift toolchain setup with configurable options
  • Expanded inputs for advanced configuration (fetch-depth, caching options, architecture)
  • Introduced comprehensive outputs for all toolchains to enable downstream workflow integration
  • Restructured test workflow with matrix testing across Ubuntu, Windows, and macOS
  • Added Harden Runner security step to audit egress network traffic
  • Replaced README with placeholder indicating forthcoming documentation update

Reviewed Changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated 16 comments.

File Description
action.yml Major expansion of composite action adding Gradle, Rust, and Swift support with new inputs, outputs, and security hardening. Contains several bugs related to missing input mappings and inconsistent defaults.
.github/workflows/test.yml Complete restructure of test workflow with matrix testing and dedicated jobs per toolchain. Multiple jobs are missing required checkout steps that will cause failures.
README.md Replaced comprehensive documentation with "TBD" placeholder, temporarily removing all usage examples and input/output documentation.
.gitignore Added extensive autogenerated gitignore templates covering Maven, Gradle, Node, Python, Java, Kotlin, Rust, and various IDEs for broader development environment support.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

rbarker-dev and others added 2 commits November 19, 2025 12:24
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Andrew Brandt <andrew.brandt@hashgraph.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Copilot reviewed 3 out of 4 changed files in this pull request and generated 6 comments.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
Signed-off-by: Roger Barker <roger.barker@swirldslabs.com>
@rbarker-dev rbarker-dev merged commit 89e4edd into main Nov 19, 2025
10 checks passed
@rbarker-dev rbarker-dev deleted the 2-update-composite-action-for-real-life branch November 19, 2025 20:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

feature New Feature

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update composite action for real life

3 participants