1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
# Sovereign CI — calls reusable workflow from paiml/.github
name: CI
on:
push:
branches:
pull_request:
branches:
workflow_dispatch:
concurrency:
group: ci-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
jobs:
ci:
uses: paiml/.github/.github/workflows/sovereign-ci.yml@main
with:
repo: ${{ github.event.repository.name }}
# Upstream sovereign-ci.yml flipped enable_sccache default to true on
# 2026-04-18 (fleet rollout after Phase 3 pilot), but the
# sovereign-ci:stable runner image lacks a rustc-sccache binary —
# every CI job since ~12:00 UTC 2026-04-19 fails with
# `could not execute process rustc-sccache`. Disable per-repo until
# upstream installs the wrapper in the runner image (or reverts the
# default). Re-enable by deleting this line.
enable_sccache: false
secrets: inherit
# Top-level gate satisfies the org ruleset "Green Main" which requires a
# status check named exactly `gate`. Reusable-workflow jobs always render
# as `ci / gate`; rulesets need an unprefixed top-level job to match.
gate:
runs-on: ubuntu-latest
needs:
if: always()
steps:
- name: Check required jobs
run: |
if [ "${{ needs.ci.result }}" != "success" ]; then
echo "ci failed: ${{ needs.ci.result }}"
exit 1
fi
echo "All required jobs passed"