[PR #15636] Add CI/CD, CodeQL, Dependabot, Dev Container, Benchmarks & SBOM #25734

Open
opened 2026-04-19 18:25:12 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/ollama/ollama/pull/15636
Author: @c6zks4gssn-droid
Created: 4/16/2026
Status: 🔄 Open

Base: mainHead: improvements/fork-doctor


📝 Commits (10+)

  • bafecda ci: add GitHub Actions CI workflow (lint, test, build)
  • 9d50348 ci: add CodeQL security scanning workflow
  • ab65dba ci: add Dependabot configuration
  • 642373c ci: add pre-commit hooks configuration
  • 0edf89e docs: add pull request template
  • 5df1b9c ci: add semantic versioning and release automation
  • 3f4bcd4 dev: add dev container configuration
  • 5326e6c docs: add CI, license, and version badges to README
  • cd3ebf1 ci: add performance benchmarking workflow
  • b6d8402 ci: add SBOM generation workflow

📊 Changes

10 files changed (+277 additions, -0 deletions)

View changed files

.devcontainer/devcontainer.json (+18 -0)
.github/PULL_REQUEST_TEMPLATE.md (+26 -0)
.github/dependabot.yml (+19 -0)
.github/workflows/benchmark.yml (+24 -0)
.github/workflows/ci.yml (+68 -0)
.github/workflows/codeql.yml (+25 -0)
.github/workflows/release.yml (+37 -0)
.github/workflows/sbom.yml (+36 -0)
.pre-commit-config.yaml (+19 -0)
📝 README.md (+5 -0)

📄 Description

Improvements

This PR adds 10 missing project infrastructure features, bringing the score from 3/13 to 13/13:

  1. CI/CD — lint, test, build for Go + TypeScript
  2. CodeQL — security scanning (Go + JS)
  3. Dependabot — weekly updates for Go modules, npm, GitHub Actions
  4. Pre-commit hooks — golangci-lint, prettier, YAML checks
  5. PR template — structured template with testing checklist
  6. Release automation — tag-triggered releases with auto changelog
  7. Dev container — Go 1.22 + Node 20 + gh CLI
  8. README badges — CI, Security, License, Release version
  9. Benchmark workflow — Go benchmark with artifact upload
  10. SBOM workflow — SPDX SBOM generation for Go + npm

Each improvement is a separate commit for easy review.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/ollama/ollama/pull/15636 **Author:** [@c6zks4gssn-droid](https://github.com/c6zks4gssn-droid) **Created:** 4/16/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `improvements/fork-doctor` --- ### 📝 Commits (10+) - [`bafecda`](https://github.com/ollama/ollama/commit/bafecda247a855c6fbc6d4aeb2fbae987022949e) ci: add GitHub Actions CI workflow (lint, test, build) - [`9d50348`](https://github.com/ollama/ollama/commit/9d50348db7baa21e603fc1e5abec2ad879c785f7) ci: add CodeQL security scanning workflow - [`ab65dba`](https://github.com/ollama/ollama/commit/ab65dba3ea4a45eeb90ff894eb66331ea303cbca) ci: add Dependabot configuration - [`642373c`](https://github.com/ollama/ollama/commit/642373cde2bdb8fbb90972cd5b09ae86879ce7c1) ci: add pre-commit hooks configuration - [`0edf89e`](https://github.com/ollama/ollama/commit/0edf89eab7280c323af79d9dce05e46cede57dee) docs: add pull request template - [`5df1b9c`](https://github.com/ollama/ollama/commit/5df1b9cd33d48eae2b115fdf99a0b97ff2c73cad) ci: add semantic versioning and release automation - [`3f4bcd4`](https://github.com/ollama/ollama/commit/3f4bcd4245f9cb754b765341602cca0e8e122af1) dev: add dev container configuration - [`5326e6c`](https://github.com/ollama/ollama/commit/5326e6c228b3751221a4bec60891ed89729a9f7e) docs: add CI, license, and version badges to README - [`cd3ebf1`](https://github.com/ollama/ollama/commit/cd3ebf10eb13ca5d8c51764f0cd6a1e1d054ccf9) ci: add performance benchmarking workflow - [`b6d8402`](https://github.com/ollama/ollama/commit/b6d840224d69c3bdb1ebf3ebe42e74804e459386) ci: add SBOM generation workflow ### 📊 Changes **10 files changed** (+277 additions, -0 deletions) <details> <summary>View changed files</summary> ➕ `.devcontainer/devcontainer.json` (+18 -0) ➕ `.github/PULL_REQUEST_TEMPLATE.md` (+26 -0) ➕ `.github/dependabot.yml` (+19 -0) ➕ `.github/workflows/benchmark.yml` (+24 -0) ➕ `.github/workflows/ci.yml` (+68 -0) ➕ `.github/workflows/codeql.yml` (+25 -0) ➕ `.github/workflows/release.yml` (+37 -0) ➕ `.github/workflows/sbom.yml` (+36 -0) ➕ `.pre-commit-config.yaml` (+19 -0) 📝 `README.md` (+5 -0) </details> ### 📄 Description ## Improvements This PR adds 10 missing project infrastructure features, bringing the score from 3/13 to 13/13: 1. **CI/CD** — lint, test, build for Go + TypeScript 2. **CodeQL** — security scanning (Go + JS) 3. **Dependabot** — weekly updates for Go modules, npm, GitHub Actions 4. **Pre-commit hooks** — golangci-lint, prettier, YAML checks 5. **PR template** — structured template with testing checklist 6. **Release automation** — tag-triggered releases with auto changelog 7. **Dev container** — Go 1.22 + Node 20 + gh CLI 8. **README badges** — CI, Security, License, Release version 9. **Benchmark workflow** — Go benchmark with artifact upload 10. **SBOM workflow** — SPDX SBOM generation for Go + npm Each improvement is a separate commit for easy review. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-19 18:25:12 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/ollama#25734