Skip to content

chore: add devcontainer contributor workflow [DX-822]#274

Merged
Tyler Collins (t-col) merged 4 commits intomasterfrom
codex/dx-822-devcontainers
Mar 31, 2026
Merged

chore: add devcontainer contributor workflow [DX-822]#274
Tyler Collins (t-col) merged 4 commits intomasterfrom
codex/dx-822-devcontainers

Conversation

@t-col
Copy link
Copy Markdown
Contributor

This repository still relied on a legacy CI setup and did not have a checked-in devcontainer, which meant contributors had to reconstruct the right toolchain locally and had no guarantee that their machine matched the environment used in automation. The practical effect is that routine fixes and feature work are harder to start, and environment drift becomes a source of avoidable failure.

This change makes the repository-local devcontainer the source of truth for both local development and CI. It adds .devcontainer/Dockerfile and .devcontainer/devcontainer.json, adds a GitHub Actions workflow built around devcontainers/ci, removes the retired CircleCI or Travis build configuration, and updates the public contributor documentation and badges so the documented path matches the checked-in tooling. CodeQL is left in place.

This keeps the existing Ruby contributor workflow intact while making the containerized setup the source of truth for both local work and CI.

Validation for this repo was done against the checked-in devcontainer configuration rather than a hand-built local environment. Built the devcontainer and ran bundle install && bundle exec rake rspec_rubocop. I also rechecked the updated devcontainer JSON and workflow YAML for validity and confirmed that stale CircleCI/Travis references were removed from the public README and CONTRIBUTING entry points.

@wiz-inc-38d59fb8d7
Copy link
Copy Markdown

wiz-inc-38d59fb8d7 bot commented Mar 20, 2026

Wiz Scan Summary

Scanner Findings
Vulnerability Finding Vulnerabilities -
Data Finding Sensitive Data -
Secret Finding Secrets -
IaC Misconfiguration IaC Misconfigurations 1 High
SAST Finding SAST Findings -
Software Management Finding Software Management Findings -
Total 1 High

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

@t-col Tyler Collins (t-col) marked this pull request as ready for review March 21, 2026 01:25
@t-col Tyler Collins (t-col) requested a review from a team as a code owner March 21, 2026 01:25
@t-col Tyler Collins (t-col) enabled auto-merge (squash) March 23, 2026 15:13
@t-col Tyler Collins (t-col) merged commit f746310 into master Mar 31, 2026
11 checks passed
@t-col Tyler Collins (t-col) deleted the codex/dx-822-devcontainers branch March 31, 2026 19:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants