feat(model-apps): verify what persona security roles grant, + public-repo hygiene #622

	name: validate-repository-metadata

	on:
	pull_request:
	workflow_dispatch:

	jobs:
	validate-repository-metadata:
	name: validate-repository-metadata
	runs-on: ubuntu-latest
	env:
	POWER_PLATFORM_SKILLS_TELEMETRY_POWER_PAGES_OPTOUT: "1"
	POWER_PLATFORM_SKILLS_TELEMETRY_MODEL_APPS_OPTOUT: "1"
	steps:
	- name: checkout
	uses: actions/checkout@v4

	- name: setup-node
	uses: actions/setup-node@v4
	with:
	node-version: 20

	- name: validate-open-plugin-names
	run: node scripts/validate-plugin-names.js

	- name: validate-legacy-compatibility
	run: node scripts/validate-legacy-compatibility.js

	- name: validate-skill-descriptions
	run: node scripts/validate-skill-descriptions.js

	- name: validate-telemetry-ikeys
	run: node scripts/validate-telemetry-ikeys.js

	- name: test-secure-process-execution-validator
	run: node --test scripts/tests/validate-secure-process-execution.test.js

	- name: validate-secure-process-execution
	run: node scripts/validate-secure-process-execution.js

	# This repository is public, and the genpage eval fixtures are captured
	# agent transcripts that will faithfully record whatever live environment
	# an eval was run against. Guarding this in CI is the only reliable
	# control: a pasted transcript looks correct to a reviewer.
	- name: test-no-real-environments-validator
	run: node --test scripts/tests/validate-no-real-environments.test.js

	- name: validate-no-real-environments
	run: node scripts/validate-no-real-environments.js

Navigation Menu