fix(ci): make main deployable again — coverage, CVEs, and the image job (#22)

2026-08-30 21:33:08 +00:00
parent f2f9ab74c8
commit ba483cae97
4 changed files with 121 additions and 102 deletions
@@ -122,7 +122,10 @@ jobs:
    #                     --service breakpilot-portal --branch main
    # ) accepts unsigned payloads — orca matches on repo + branch.
    needs: [shared, test]
-    if: github.event_name == 'push' && github.ref == 'refs/heads/main' && hashFiles('Dockerfile') != ''
+    # NOTE: no hashFiles() here — at job level it evaluates BEFORE checkout
+    # against an empty workspace, so the old condition was always false and
+    # this job silently never ran (deployment sat on a June-10 image).
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
    runs-on: docker
    steps:
      - uses: actions/checkout@v4