Skip to content

fix: resolve all issues from #26 — deps, badges, CODEOWNERS, branch refs, duplicate dir #29

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
mr-adonis-jimenez wants to merge 6 commits into
base: main
Choose a base branch
from
Open

fix: resolve all issues from #26 — deps, badges, CODEOWNERS, branch refs, duplicate dir #29

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
2b890bd
fix(#26): sync requirements.txt with pyproject.toml dependencies
mr-adonis-jimenez Mar 29, 2026
7b68ba9
fix(#26): remove placeholder npm badge, fix CI badge URL, master→main
mr-adonis-jimenez Mar 29, 2026
a7ecde8
fix(#26): add CODEOWNERS to .github/ (moved from root CODEOWNERS.md)
mr-adonis-jimenez Mar 29, 2026
8f9941b
fix(#26): remove CODEOWNERS.md from root (replaced by .github/CODEOWN…
mr-adonis-jimenez Mar 29, 2026
5523051
fix(#26): update CONTRIBUTING.md master→main branch references
mr-adonis-jimenez Mar 29, 2026
931a70e
fix(#26): remove duplicate GitHub/dependabot.yml (stale npm config, .…
mr-adonis-jimenez Mar 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 18 additions & 0 deletions .github/CODEOWNERS
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
# Global owners
* @mr-adonis-jimenez

# Frontend code
/frontend/** @mr-adonis-jimenez

# Backend API
/api/** @mr-adonis-jimenez

# Infrastructure
/terraform/** @mr-adonis-jimenez
/.github/** @mr-adonis-jimenez

# Documentation
/docs/** @mr-adonis-jimenez

# Critical security files
/auth/** @mr-adonis-jimenez
18 changes: 0 additions & 18 deletions CODEOWNERS.md
View file
Open in desktop

This file was deleted.

6 changes: 3 additions & 3 deletions CONTRIBUTING.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,17 +2,17 @@

### Enable repository git hooks (recommended)

This repo includes a `pre-push` hook to prevent direct pushes to the protected `master` branch.
This repo includes a `pre-push` hook to prevent direct pushes to the protected `main` branch.

@chatgpt-codex-connector chatgpt-codex-connector Bot Mar 29, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Correct protected branch name in hook guidance

The updated docs now state that the local pre-push hook blocks pushes to main, but scripts/git-hooks/pre-push still hard-codes refs/heads/master. In this state, contributors who follow CONTRIBUTING.md can still push directly to main, so the branch-protection guidance is inaccurate and creates a false sense of enforcement.

Useful? React with 👍 / 👎.


1. Configure git to use the repo’s hook directory:
1. Configure git to use the repo's hook directory:

`git config core.hooksPath scripts/git-hooks`

2. Ensure the hook is executable:

`chmod +x scripts/git-hooks/pre-push`

After that, any attempt to `git push` updates directly to `master` will be blocked locally.
After that, any attempt to `git push` updates directly to `main` will be blocked locally.

## Code Style
## Testing
Expand Down
13 changes: 0 additions & 13 deletions GitHub/dependabot.yml
View file
Open in desktop

This file was deleted.

13 changes: 5 additions & 8 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,17 +1,16 @@
## Release Pipeline

- ✔ OIDC-based npm publishing (no secrets)
- ✔ OIDC-based publishing (no secrets)
- ✔ Verified supply-chain provenance
- ✔ Automated quality gates (lint, test, audit)
- ✔ Reusable CI workflows

## Contributing / Branch protection

Direct pushes to `master` should be avoided. See `CONTRIBUTING.md` to enable the repo’s `pre-push` hook that blocks direct pushes to `master` locally.
Direct pushes to `main` should be avoided. See `CONTRIBUTING.md` to enable the repo's `pre-push` hook that blocks direct pushes to `main` locally.

## Release & Security Architecture
## Release & Security Architecture

- Monorepo publishing with npm workspaces
- OIDC-based trusted publishing (no secrets)
- Canary & RC release channels
- SBOM generation (CycloneDX)
Expand All @@ -20,9 +19,8 @@ Direct pushes to `master` should be avoided. See `CONTRIBUTING.md` to enable the

This pipeline enforces supply-chain integrity and production-grade quality gates.


![npm](https://img.shields.io/npm/v/your-package)
![CI](https://github.com/you/repo/actions/workflows/npm-publish.yml/badge.svg)
![CI](https://github.com/mr-adonis-jimenez/geo-analytics-api/actions/workflows/ci-cd.yml/badge.svg)
![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)

# 🌎 Geo-Analytics API/Dashboard

Expand Down Expand Up @@ -113,4 +111,3 @@ curl -s -X POST "http://localhost:8000/api/datasets/json?name=my-dataset" \
curl -s -X POST "http://localhost:8000/api/datasets/csv?name=my-csv" \
-F "file=@regional_data.csv" | jq
```

14 changes: 12 additions & 2 deletions requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,16 @@
# Core
fastapi
uvicorn
uvicorn[standard]
pandas
pytest
numpy
python-multipart

# Dev / testing
pytest
pytest-cov
pytest-asyncio
httpx
black
flake8
isort
pylint
Loading