Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci(docs, security): update main branch with CI improvements, documentation updates, and security enhancements #7

Merged
merged 7 commits into from
Nov 14, 2024

Conversation

DarkRockMountain-admin
Copy link
Collaborator

Description

This pull request merges the latest changes from the develop branch into main. Key updates include:

  • Documentation Update: Updated the README with an example for EWCModelWrapper integration and clarified usage instructions, improving usability for new users.

  • CI Enhancements:

    • Added the develop branch to the Codecov workflow, ensuring code coverage is reported for both main and develop.
    • Updated the Codecov upload condition in the CI workflow to selectively upload coverage data based on specified branches, optimizing CI runs.
    • Added minimal permissions to the coverage workflow, aligning with security best practices by limiting permissions in the CI pipeline.
  • Merges of Related Pull Requests:

    • Integrated the updates for Codecov conditions in CI workflow and OpenSSF security improvements from recent pull requests, ensuring the latest configurations and permissions are applied.
  • Other Minor Fixes and Enhancements: Improved the overall stability and maintainability of the CI configuration and security settings based on recent changes.

  • Related Issue: Closes [FEATURE] - Update README with EWCModelWrapper Integration Examples and Clarifications #2 [SECURITY] - Apply Minimal Permissions to GitHub Actions Workflows Based on SSF Report #4

  • Type of Change:

    • Bug fix (non-breaking change that fixes an issue)
    • Documentation update
    • CI/CD configuration update

Checklist

Please ensure the following guidelines are met:

  • The code follows the style guidelines of this project.
  • A self-review has been performed on the code.
  • The code is well-documented, and comments have been added where necessary.
  • Tests have been added to prove that the fix is effective or that the feature works. All existing tests pass.
  • Commit messages follow the convention type(scope): description.
  • The pull request has no conflicts with the base branch.
  • Any dependent changes have been merged and published in downstream modules.

Additional Information

This merge will update the main branch with the latest CI/CD and documentation improvements from develop. No additional dependencies are required, and the changes help improve the security and reliability of the CI workflows.

JRocabruna and others added 7 commits November 11, 2024 11:27
…ifications

- Changed section title to reflect integration with `EWCModelWrapper` for NER training

- Updated imports to directly use `EWCModelWrapper` and `EWC` instead of `create_ewc_pipe`

- Clarified flexibility in model loading with note on using any spaCy pre-trained model

- Detailed EWC and EWCModelWrapper initialization steps, including FIM calculation

- Added explanation of entity annotation generation, depending on model’s pre-trained knowledge

- Demonstrated wrapping the NER model with EWCModelWrapper for applying EWC penalties

- Included example for adding custom entity labels conditionally to avoid duplication

- Expanded training loop description to emphasize EWC penalty’s role in preventing forgetting

- Provided example of test sentence to verify new custom labels alongside retained original labels
- Created the develop branch
- Updated coverage.yaml to apply workflow to develop branch as well
…cmodelwrapper

docs: update README with EWCModelWrapper integration example and clarifications
Defined explicit permissions for contents as read-only in the coverage workflow. This change addresses SSF recommendations by ensuring the GitHub Actions token only has the necessary permissions to perform code coverage analysis. Reduces security exposure by adhering to the principle of least privilege.
ci: update Codecov upload condition in CI workflow
…ssions

ci(workflows): add minimal permissions to coverage workflow
@DarkRockMountain-admin DarkRockMountain-admin added documentation Improvements or additions to documentation enhancement New feature or request github_actions Pull requests that update GitHub Actions code labels Nov 14, 2024
Copy link
Member

@JRocabruna JRocabruna left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Comments

The proposed updates to the main branch encompass significant improvements in continuous integration (CI), documentation, and security. These enhancements are well-structured and align with the project's objectives.

Review Checklist

  • Code adheres to the project's coding guidelines.
  • Changes are well-documented.
  • Tests have been added/updated and pass successfully.
  • Commit messages follow the correct format: type(scope): description.
  • No conflicts with the base branch.

Approval

Approved: The changes meet the project's contribution standards and are ready for integration.

@JRocabruna JRocabruna merged commit 41fc0ec into main Nov 14, 2024
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation enhancement New feature or request github_actions Pull requests that update GitHub Actions code
Projects
None yet
2 participants