@theholocron/cli 2.0.0-alpha.22 → 2.0.0-alpha.24

package/dist/capabilities/index.d.mts

@@ -100,6 +100,12 @@ interface Source extends ProviderIdentity {
    * Triggers a new analysis run; returns the run id.
    */
   enableCodeScanning(): Promise<string>;
+  /**
+   * Disables CodeQL default setup. Required when the repo uses an advanced
+   * CodeQL workflow instead — GitHub rejects SARIF from advanced workflows
+   * while default setup is active.
+   */
+  disableDefaultCodeScanning(): Promise<void>;
   listWorkflowFiles(): Promise<string[]>;
   readWorkflowFile(name: string): Promise<string | null>;
   writeWorkflowFile(name: string, contents: string): Promise<void>;

package/dist/cli.mjs

@@ -1938,6 +1938,19 @@ jobs:
 };
 const KNOWN_WORKFLOWS = new Set(Object.keys(WORKFLOW_TEMPLATES));
 /**
+* GitHub check context name each CI workflow produces on a PR.
+*
+* The format is "{caller-workflow-name} / {reusable-job-name}". The caller
+* job's own `name:` field does NOT appear in the external check name — only
+* the calling workflow's top-level `name:` and the inner reusable-workflow
+* job name matter. Only workflows that gate merges are listed here.
+*/
+const WORKFLOW_CHECK_CONTEXTS = {
+	lint: "Lint / Lint entire codebase",
+	test: "Test / Run tests and collect coverage",
+	typecheck: "Typecheck / tsc --noEmit"
+};
+/**
 * Generate the thin caller content for a workflow, optionally injecting
 * `with:` inputs before `secrets: inherit` in the jobs block.
 */
@@ -3752,8 +3765,10 @@ async function runSetup(input) {
 			}));
 			print(formatStep(steps[steps.length - 1]));
 		}
-		steps.push(await runStep("source", "enableCodeScanning", dryRun, async () => {
-			return await source.enableCodeScanning();
+		const usesAdvancedCodeQL = (config.project.workflows ?? []).map((e) => typeof e === "string" ? e : e.name).includes("codeql");
+		steps.push(await runStep("source", usesAdvancedCodeQL ? "disableDefaultCodeScanning" : "enableCodeScanning", dryRun, async () => {
+			if (usesAdvancedCodeQL) await source.disableDefaultCodeScanning();
+			else return await source.enableCodeScanning();
 		}));
 		print(formatStep(steps[steps.length - 1]));
 		const policy = config.project.repoPolicy;
@@ -3763,7 +3778,15 @@ async function runSetup(input) {
 				await source.updateRepoSettings(BALANCED_REPO_SETTINGS);
 			}));
 			print(formatStep(steps[steps.length - 1]));
-			const requiredChecks = preset === "strict" ? policy.requiredChecks ?? [] : [];
+			const configuredWorkflowNames = (config.project.workflows ?? []).map((entry) => typeof entry === "string" ? entry : entry.name);
+			const requiredChecks = preset === "strict" ? [
+				"DCO",
+				...configuredWorkflowNames.flatMap((name) => {
+					const ctx = WORKFLOW_CHECK_CONTEXTS[name];
+					return ctx ? [ctx] : [];
+				}),
+				...policy.requiredChecks ?? []
+			] : [];
 			steps.push(await upsertBranchProtection(source, dryRun, requiredChecks));
 			print(formatStep(steps[steps.length - 1]));
 		}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theholocron/cli",
-  "version": "2.0.0-alpha.22",
+  "version": "2.0.0-alpha.24",
   "description": "The Holocron CLI — a pluggable, capability-based orchestrator for spinning up and operating software projects.",
   "homepage": "https://github.com/theholocron/holocron/tree/main/packages/cli#readme",
   "bugs": "https://github.com/theholocron/holocron/issues",