vllm-project/semantic-router GitHub Actions scorecard

# No concurrency control — applies to: Content Moderation, Issue Manager, Owner Notification
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

# Large build matrix — applies to: Create and publish Docker images
strategy:
  fail-fast: true
  matrix:
    include:
      - { os: ubuntu-latest, node: 20 }
      - { os: ubuntu-latest, node: 22 }

# cancel-in-progress on a deploy workflow — applies to: Create and publish Docker images, Publish Python Package to PyPI
concurrency:
  group: ${{ github.workflow }}
  # queued deploys run in order; none are dropped

# ARM builds emulated under QEMU — applies to: Create and publish Docker images, Operator CI
jobs:
  build-arm:
    runs-on: ubuntu-24.04-arm  # native, no QEMU — free for public repos

# No job timeout — applies to: Owner Notification, Pre-commit, Test And Build, Issue Manager, Content Moderation, Integration Test [Dashboard], Publish Python Package to PyPI, Supply Chain Security Scan, Check Linked Issue, Router Learning Eval
jobs:
  build:
    runs-on: ubuntu-latest
    timeout-minutes: 15

# No path filters on triggers — applies to: Test And Build, Content Moderation, Integration Test [Dashboard], Check Linked Issue
on:
  pull_request:
    paths:
      - 'src/**'
      - 'package.json'

# Scheduled at the top of the hour — applies to: Test And Build
on:
  schedule:
    - cron: '33 2 * * *'  # was '0 2 * * *' — any non-:00 minute avoids the herd

# System packages reinstalled every run — applies to: Integration Test [Kubernetes]
- uses: awalsh128/cache-apt-pkgs-action@latest
  with:
    packages: <your packages>
    version: 1.0

# Full-history clone (fetch-depth: 0) — applies to: Performance Tests, Supply Chain Security Scan
- uses: actions/checkout@v4
  # fetch-depth: 0 removed — default shallow clone is enough here

# Artifacts at default retention — applies to: Router Learning Eval
- uses: actions/upload-artifact@v4
  with:
    name: build
    path: dist/
    retention-days: 7

Each snippet is representative — merge into the named workflow files rather than pasting wholesale.