Skip to content

feat: compliance reports integration#11

Merged
avrabe merged 9 commits intomainfrom
feat/compliance-reports-integration
Mar 15, 2026
Merged

feat: compliance reports integration#11
avrabe merged 9 commits intomainfrom
feat/compliance-reports-integration

Conversation

@avrabe
Copy link
Copy Markdown
Contributor

@avrabe avrabe commented Mar 15, 2026

Summary

  • Add reports.toml manifest for declaring which projects publish compliance reports
  • Add tools/fetch-reports/ Rust CLI tool that fetches HTML exports from GitHub releases, validates tarballs, generates config.js version switchers and index.json
  • Add /reports/ index page with project cards and version badge links
  • Add Reports nav link to site header
  • Extend deploy workflow with repository_dispatch trigger + Rust toolchain + fetch-reports step
  • Add reference doc for component repo dispatch step

Prerequisites (not blocked — reports page shows empty state until these exist)

  • rivet export --html command (rivet repo)
  • Compliance report release assets in component workflows

Test plan

  • zola build passes
  • /reports/ page renders with empty state ("No compliance reports available yet.")
  • cargo run --manifest-path tools/fetch-reports/Cargo.toml runs without errors
  • Navigation shows Reports link
  • CI passes

Spec

docs/superpowers/specs/2026-03-15-compliance-reports-integration-design.md

🤖 Generated with Claude Code

avrabe and others added 9 commits March 15, 2026 13:42
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
…config.js, and index.json

Complete rewrite of fetch-reports tool to:
- Query GitHub releases API with pagination and optional auth
- Filter releases by exclude patterns and match compliance report assets
- Download and extract tarballs with path traversal safety checks
- Generate config.js for rivet version switching UI
- Copy latest version directory and write index.json manifest
- Handle errors gracefully (missing manifest, API failures, bad downloads)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Use RIVET_EXPORT variable name (not RIVET_CONFIG) to match rivet's export.rs
- Extract flat tarballs into compliance/ subdirectory (rivet packages with -C)
- Remove compliance/ prefix requirement from tarball validation

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@avrabe avrabe merged commit ff80e04 into main Mar 15, 2026
1 check passed
@avrabe avrabe deleted the feat/compliance-reports-integration branch March 15, 2026 18:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant