From 3a66c428a11c5046a1b653d8a5530fd7a8eb8e9e Mon Sep 17 00:00:00 2001
From: Action Platform <cloud@actionplatform.io>
Date: Mon, 14 Sep 2026 06:15:46 +0000
Subject: [PATCH] chore(platform): update configuration

---
 .github/workflows/conventional-commit.yml | 14 ++++++++
 .github/workflows/gitflow.yml             | 12 +++++++
 .github/workflows/trivy.yml               | 43 +++++++++++++++++++++++
 AGENTS.md                                 |  9 +++++
 platform.toml                             | 13 +++++++
 5 files changed, 91 insertions(+)
 create mode 100644 .github/workflows/conventional-commit.yml
 create mode 100644 .github/workflows/gitflow.yml
 create mode 100644 .github/workflows/trivy.yml
 create mode 100644 AGENTS.md
 create mode 100644 platform.toml

diff --git a/.github/workflows/conventional-commit.yml b/.github/workflows/conventional-commit.yml
new file mode 100644
index 00000000..fa1b36fe
--- /dev/null
+++ b/.github/workflows/conventional-commit.yml
@@ -0,0 +1,14 @@
+name: Conventional commit
+
+on:
+  pull_request:
+    branches: ["main", "master"]
+
+jobs:
+  commits:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+      - uses: actionplatform/ci-github/conventional-commit@v1
diff --git a/.github/workflows/gitflow.yml b/.github/workflows/gitflow.yml
new file mode 100644
index 00000000..fb163853
--- /dev/null
+++ b/.github/workflows/gitflow.yml
@@ -0,0 +1,12 @@
+name: Git-flow
+
+on:
+  pull_request:
+    branches: ["main", "master", "develop"]
+
+jobs:
+  gitflow:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actionplatform/ci-github/gitflow@v1
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
new file mode 100644
index 00000000..37d33f83
--- /dev/null
+++ b/.github/workflows/trivy.yml
@@ -0,0 +1,43 @@
+name: Trivy
+
+on:
+  pull_request:
+    branches: ["main", "master"]
+  schedule:
+    - cron: "0 6 * * 1"
+
+permissions:
+  contents: read
+  actions: read
+  security-events: write
+
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - name: Scan
+        uses: aquasecurity/trivy-action@v0.36.0
+        with:
+          scan-type: fs
+          scan-ref: .
+          severity: CRITICAL,HIGH
+          ignore-unfixed: true
+          format: table
+          exit-code: "1"
+      - name: SARIF
+        if: ${{ !cancelled() && !github.event.repository.private }}
+        uses: aquasecurity/trivy-action@v0.36.0
+        with:
+          scan-type: fs
+          scan-ref: .
+          severity: CRITICAL,HIGH
+          ignore-unfixed: true
+          format: sarif
+          output: trivy.sarif
+          skip-setup-trivy: true
+      - name: Upload to code scanning
+        if: ${{ !cancelled() && !github.event.repository.private }}
+        uses: github/codeql-action/upload-sarif@v4
+        with:
+          sarif_file: trivy.sarif
diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 00000000..4441d5e4
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,9 @@
+# AGENTS.md
+
+Rules an AI agent (or a new contributor) follows in this repo. Added by `action-platform install`; keep it current.
+
+[Conventional Commits 1.0.0](https://www.conventionalcommits.org/en/v1.0.0/): `type(scope)!: description` — `feat`, `fix`, `docs`, `style`, `refactor`, `perf`, `test`, `build`, `ci`, `chore`, `revert`. One commit per concern; stage files explicitly — never `git add .`. Enforced by git hooks (`action-platform install`) and CI.
+
+Git-flow: work on `<kind>/<code>[-slug]` started with `action-platform branch <kind> <code>`. Kinds: `feature bugfix hotfix release support chore docs refactor test ci perf`. Never commit on `main`, `master` or `develop`; `feature`/`bugfix` merge into `develop`, `release`/`hotfix` into `main` and `develop`.
+
+`platform.toml` declares the project; `action-platform release` cuts versions from `LAST_VERSION`; `action-platform gitflow` audits a branch before a pull request.
diff --git a/platform.toml b/platform.toml
new file mode 100644
index 00000000..6b008ffa
--- /dev/null
+++ b/platform.toml
@@ -0,0 +1,13 @@
+[project]
+name = "dotflow"
+type = "library"
+ci = "github"
+language = "python"
+
+[source_host]
+kind = "github"
+repo = "dotflow-io/dotflow"
+
+[release]
+strategy = "semver"
+changelog = "conventional"