What the developer wrote
Authored by qlrd
ci: add convetional commits to krux (#787)
What changed, and why it matters
This commit adds a new automated GitHub Actions check that enforces conventional commit message formatting (like 'feat:', 'fix:', 'ci:') for pull requests. It does not change any application code, cryptography, wallet logic, or user-facing behavior. There is no security relevance in the change itself.
No security action needed. Optionally review the third-party action `webiny/action-conventional-commits@v1.3.0` for supply-chain trust and pin by SHA if organizational policy requires, but this is a routine CI hygiene change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
A new workflow file .github/workflows/conventional-commits.yml is introduced. It runs on pull_request events using actions/checkout@v4 and webiny/action-conventional-commits@v1.3.0, restricting allowed commit types. The workflow is purely a CI linting/governance control and touches no source code, build artifacts, secrets, or permissions.
Changed components
.github/workflows/conventional-commits.ymlInspect captured patch +13 / −0
diff --git a/.github/workflows/conventional-commits.yml b/.github/workflows/conventional-commits.yml
new file mode 100644
index 0000000..46b2a02
--- /dev/null
+++ b/.github/workflows/conventional-commits.yml
@@ -0,0 +1,13 @@
+name: Conventional Commits
+
+on:
+ pull_request: # We only need to check commit messages in PRs
+
+jobs:
+ conventional-commits:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v4
+ - uses: webiny/action-conventional-commits@v1.3.0
+ with:
+ allowed-commit-types: "feat,fix,docs,style,refactor,test,i18n,ci,chore,git"
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.