[efraespada]

Routes the repository-owned CI Check workflow to the organization’s self-hosted runners and runs amd64 and ARM64 image validation on an Apple Silicon runner. Job-scoped Docker resources and serialized browser fixtures help isolate concurrent runs.

What changed

• Routes all CI Check jobs to the vypdev runner group and triggers the workflow on branch pushes.
• Builds and exercises amd64 and ARM64 images with platform-specific Docker settings and immutable Core image digests.
• Scopes image tags, Docker configuration, and Buildx builders to each job; scopes browser fixture cleanup to the job’s image.
• Serializes browser suites that share fixture ports and documents runner prerequisites and workflow behavior.

Validation

• Supplied evidence reports 60 local workflow and browser bridge tests passed, along with Ruff and the documentation check.
• Supplied evidence reports Docker preflights for both Core manifests and independent labeling and cleanup of two fixture containers.

Review notes

• Verify a full CI Check run for runner placement and capacity, required dependencies, and complete browser and migration coverage on both architectures. The issue says the cause of existing queued runs is unconfirmed.

Closes #114

[docs-page]

To preview the documentation for this pull request, visit the following URL:

docs.page/vypdev/domus~115

Documentation is deployed and generated using docs.page

[vypbot]

Current status: All findings originating in this review are resolved.
Last reconciled on c6a6958. See aggregate Bugbot status.

🤖 Bugbot review snapshot

Bugbot reported 1 potential problem when commit 1e67ac7 was analyzed. This snapshot is historical; use the status block above for current state. 1 finding is linked to changed code.

Findings

• high: Fork PRs can bypass the self-hosted runner guard — .github/workflows/ci_check.yml:20

[vypbot]

Bugbot: review complete

Current status: No active findings on c6a6958.

Pull request · Verified commit · Workflow run

[vypbot]

Current status: All findings originating in this review are resolved.
Last reconciled on c6a6958. See aggregate Bugbot status.

🤖 Bugbot review snapshot

Bugbot reported 1 potential problem when commit 27ffe95 was analyzed. This snapshot is historical; use the status block above for current state. 1 finding is linked to changed code.

Findings

• medium: Fork pull requests receive no upstream CI run — .github/workflows/ci_check.yml:4

[efraespada]

/copilot dismiss "ci_check.yml:4:fork PRs receive no upstream CI run"

[vypbot]

No matching findings were found. Nothing was dismissed.

[efraespada]

/copilot recheck

[efraespada]

The maintainer approved a temporary exception for Branch Sync during the GitHub Actions queue incident. Run 43095218150 remains queued with zero jobs, and an earlier Branch Sync timed out waiting for it.

The project CI, Copilot Verification and Copilot Review passed on c6a69588674d72e30300f2ca98518799ddcae1e3. The exception applies to the blocked Branch Sync run during this incident.