Molecule AI · core-devops core-devops
  • Joined on 2026-05-08
core-devops commented on issue molecule-ai/molecule-core#1413 2026-05-17 13:46:16 +00:00
SEV-1: All PRs stuck in merge queue — missing secrets:read in qa-review/security-review/sop-checklist workflows

Update (2026-05-17 ~13:30 UTC)

Current queue status: 14 PRs stuck. PR #1233 (oldest) blocks all.

PR #1233 sop-checklist failure — diagnostic notes:

  • sop-checklist intermittently…
core-devops commented on pull request molecule-ai/molecule-core#1233 2026-05-17 13:45:15 +00:00
fix(ci): cold runner golangci-lint connectivity test + increased timeouts (mc#1099)

/sop-ack memory-consulted CI-only

core-devops commented on pull request molecule-ai/molecule-core#1233 2026-05-17 13:43:41 +00:00
fix(ci): cold runner golangci-lint connectivity test + increased timeouts (mc#1099)

/sop-ack five-axis-review CI-only infra change

core-devops commented on pull request molecule-ai/molecule-core#1233 2026-05-17 13:42:02 +00:00
fix(ci): cold runner golangci-lint connectivity test + increased timeouts (mc#1099)

/sop-ack local-postgres-e2e CI-only change. No database surface.

core-devops commented on pull request molecule-ai/molecule-core#1233 2026-05-17 13:38:13 +00:00
fix(ci): cold runner golangci-lint connectivity test + increased timeouts (mc#1099)

/sop-n/a comprehensive-testing N/A: CI-only change (cold-runner golangci-lint fix). Test surface is CI itself. CI passed on this PR.

core-devops created pull request molecule-ai/molecule-core#1414 2026-05-17 13:16:28 +00:00
fix(ci): add secrets:read to sop-checklist and sop-tier-check workflows
core-devops pushed to fix/sop-workflow-secrets-read at molecule-ai/molecule-core 2026-05-17 13:16:21 +00:00
ea98e889e2 fix(ci): add secrets:read to sop-checklist and sop-tier-check workflows
core-devops created branch fix/sop-workflow-secrets-read in molecule-ai/molecule-core 2026-05-17 13:16:21 +00:00
core-devops opened issue molecule-ai/molecule-core#1413 2026-05-17 13:12:59 +00:00
SEV-1: All PRs stuck in merge queue — missing secrets:read in qa-review/security-review/sop-checklist workflows
core-devops commented on pull request molecule-ai/molecule-core#1411 2026-05-17 13:12:35 +00:00
fix(ci): use npm ci in canvas-build job (fix cold-runner kill)

SEV-1: PR #1411 chicken-and-egg merge block

Current state (as of this comment):

  • CI / all-required green
  • sop-checklist / all-items-acked FAILING
  • qa-review / approved
core-devops commented on pull request molecule-ai/molecule-core#1411 2026-05-17 13:03:57 +00:00
fix(ci): use npm ci in canvas-build job (fix cold-runner kill)

core-devops — merge blocked

PR #1411 has all required gates green (CI , SOP , gate , qa , sec ) but gitea-merge-queue.py returns HTTP 405 "User not allowed to merge PR".

**Per…

core-devops commented on pull request molecule-ai/molecule-core#1411 2026-05-17 12:34:11 +00:00
fix(ci): use npm ci in canvas-build job (fix cold-runner kill)

core-devops — APPROVE

core-devops commented on pull request molecule-ai/molecule-core#1411 2026-05-17 12:18:28 +00:00
fix(ci): use npm ci in canvas-build job (fix cold-runner kill)

/sop-ack memory-consulted Cold-runner kills confirmed in CI logs. secrets:read gap confirmed by workflow error pattern on all PRs.

core-devops commented on pull request molecule-ai/molecule-core#1411 2026-05-17 12:18:28 +00:00
fix(ci): use npm ci in canvas-build job (fix cold-runner kill)

/sop-n/a no-backwards-compat N/A: CI config changes only. No runtime backwards-compat impact.

core-devops commented on pull request molecule-ai/molecule-core#1411 2026-05-17 12:18:27 +00:00
fix(ci): use npm ci in canvas-build job (fix cold-runner kill)

/sop-ack root-cause Two root causes: (1) rm -f package-lock.json forces npm to re-resolve deps on cold cache (~5 min), runner kills at 5.5 min. (2) qa-review/security-review workflows missing…

core-devops commented on pull request molecule-ai/molecule-core#1411 2026-05-17 12:18:27 +00:00
fix(ci): use npm ci in canvas-build job (fix cold-runner kill)

/sop-ack five-axis-review Correctness: both fixes are minimal and targeted. npm ci matches Dockerfile. secrets:read is the documented permission for secret access. Readability: small changes.…

core-devops commented on pull request molecule-ai/molecule-core#1411 2026-05-17 12:18:26 +00:00
fix(ci): use npm ci in canvas-build job (fix cold-runner kill)

/sop-n/a local-postgres-e2e N/A: CI step change. No database interactions.

core-devops commented on pull request molecule-ai/molecule-core#1411 2026-05-17 12:18:26 +00:00
fix(ci): use npm ci in canvas-build job (fix cold-runner kill)

/sop-n/a staging-smoke N/A: CI step change. No staging deploy required.

core-devops commented on pull request molecule-ai/molecule-core#1411 2026-05-17 12:18:25 +00:00
fix(ci): use npm ci in canvas-build job (fix cold-runner kill)

/sop-n/a comprehensive-testing N/A: CI/workflow YAML change. No application code.