No description
Find a file
OliverGiertz ec14acb46e fix(security-scan): resolve gitleaks version dynamically via API
The static URL gitleaks_linux_x64.tar.gz does not work as gitleaks
uses versioned filenames (e.g. gitleaks_8.x.x_linux_x64.tar.gz).
Fetch the latest tag via GitHub API and construct the correct URL.
2026-03-11 08:25:53 +00:00
.github/workflows fix(security-scan): resolve gitleaks version dynamically via API 2026-03-11 08:25:53 +00:00
README.md Stabilize CI runner defaults and publish v1.5 2026-03-07 12:11:04 +01:00

vanity-dev-engine

Shared CI/Security/AI reusable workflows for Vanity ecosystem repositories.

Reusable Workflow

Use from another repository:

jobs:
  use-vanity-dev-engine:
    uses: OliverGiertz/vanity-dev-engine/.github/workflows/repo-pipeline.yml@v1.5
    with:
      repo_type: ios
      xcode_project: CamperLogBook.xcodeproj
      xcode_scheme: CamperLogBook

Inputs

  • repo_type: ios, node, python, custom
  • xcode_project: Xcode project path for iOS repos
  • xcode_scheme: Xcode scheme for iOS repos
  • lint_command: optional override
  • build_command: optional override
  • test_command: optional override

Produced checks

  • use-vanity-dev-engine / ci
  • use-vanity-dev-engine / security-scan
  • use-vanity-dev-engine / ai-review

Consumer toggle

Set repository variable USE_VANITY_DEV_ENGINE=true in consumer repos to activate central execution.

Note: The default CI runner is ubuntu-latest. For iOS repositories, provide explicit build_command and test_command overrides (or use Xcode Cloud for build/test).