fork-sync-all

When Git Platforms Give You Anxiety Attacks, Who Are You Going To Call? Fork-Sync-All!

Control plane for the Interested-Deving-1896 GitHub org. Runs 147 GitHub Actions workflows that keep three GitHub orgs and two GitLab groups in sync, manage READMEs and badges across OSP-bound repos, resolve CI failures, and maintain registered upstream imports.

How it works

┌─────────────────────────────────────────────────────────────────────────────┐
│  Mirror chain (outward, every 6h)                                           │
│                                                                             │
│  Interested-Deving-1896 ──► OpenOS-Project-OSP                              │
│          ▲                         │                                        │
│          │                         ▼                                        │
│          │              OpenOS-Project-Ecosystem-OOC                        │
│          │                         │                                        │
│          │                         ▼                                        │
│          │                  GitLab openos-project                           │
│          │             (14 subgroups, 225 repos mirrored)                   │
│          │                                                                  │
│          └──── upstream-commits / upstream-prs (OSP + OOC → I-D-1896) ─────┘
└─────────────────────────────────────────────────────────────────────────────┘

┌─────────────────────────────────────────────────────────────────────────────┐
│  Full pipeline (manual / monthly)                                           │
│                                                                             │
│  flush-lifecycle ──► pre-flush-prep ──► full-chain-flush (25 stages) ──► post-flush-prep │
│       │                      │                             │                │
│  QUOTA_SNAPSHOT          QUOTA_SNAPSHOT               QUOTA_SNAPSHOT        │
│  (chain entry)           (chain start)                (chain exit)          │
└─────────────────────────────────────────────────────────────────────────────┘

┌─────────────────────────────────────────────────────────────────────────────┐
│  Quota & queue management (automatic, every 30 min)                         │
│                                                                             │
│  quota-reserve ──► queue-manager ──► rate-limit-rerun                       │
│                                           │                                 │
│                                    cancel-stale-runs                        │
│                                      quota-monitor                          │
└─────────────────────────────────────────────────────────────────────────────┘

┌─────────────────────────────────────────────────────────────────────────────┐
│  OTA system (versioned updates for independent forks)                       │
│                                                                             │
│  ota-release ──► ota-deliver ──► opted-in forks (PR per fork)               │
│       ▲                                                                     │
│  semver tag push                                                            │
│                                                                             │
│  ota-reconcile (weekly) ──► path A: stamp · B: drift PR · C: quota PR      │
└─────────────────────────────────────────────────────────────────────────────┘

This project automates repository management tasks for git-based platforms, addressing challenges in maintaining forks, synchronizing changes, and managing organizational repositories. It provides workflows for fork synchronization, upstream tracking, mirroring, README generation, badge injection, and release management. It is used by developers and organizations to streamline version control and ensure consistency across repositories.

Documentation

Workflow groups

159 workflows across 20 functional groups. Full detail in DOCS/workflow-triggers.md.

Key config files

Secrets

gh secret set <SECRET_NAME> --repo Interested-Deving-1896/fork-sync-all

Rate limits

Both SYNC_TOKEN and GH_SYNC_TOKEN belong to the same user and share the same 5,000 req/hr REST bucket. Treat them as one pool. raw.githubusercontent.com fetches do not count against the quota.

quota-reserve.yml cancels low-priority queued runs when remaining quota drops below 1,000. Check current quota:

curl -sf -H "Authorization: token $SYNC_TOKEN" \
  "https://api.github.com/rate_limit" | \
  python3 -c "
import sys, json, datetime
d = json.load(sys.stdin)['resources']['core']
reset = datetime.datetime.utcfromtimestamp(d['reset']).strftime('%H:%M UTC')
print(f'remaining={d[\"remaining\"]}  resets={reset}')
"

GitLab subgroups

14 subgroups under gitlab.com/openos-project, 225 repos mirrored. Assignments are in config/gitlab-subgroups.yml.

The project consists of several key components designed for managing git repositories and organizations across multiple platforms. It automates tasks such as fork synchronization, README generation, mirroring, badge injection, upstream tracking, and release management. The architecture is built around modular workflows, primarily written in Shell, which are executed via CI/CD pipelines. These workflows are defined in YAML files located in the .github/workflows and .gitlab directories, enabling platform-agnostic operations.

The repository is organized as follows:

.
├── .github/               # GitHub-specific configurations and workflows
│   └── workflows/         # GitHub Actions workflow definitions
├── .gitlab/               # GitLab-specific configurations and workflows
├── assets/                # Static assets for documentation and automation
├── config/                # Configuration files for various tools and workflows
├── data/                  # Data files used by workflows and scripts
├── dep-graph/             # Dependency graph generation scripts
├── docs/                  # Project documentation
├── .devcontainer/         # Development container configuration
├── .dotdrop/              # Dotfiles management
├── .ota/                  # Over-the-air update configurations
├── .reuse/                # Licensing compliance files
├── AGENTS.md              # Documentation for agent-based workflows
├── CHANGELOG.md           # Project changelog
├── CONTRIBUTING.md        # Contribution guidelines
├── LICENSE                # License file
├── README.md              # Project overview and usage instructions
└── book.toml              # Configuration for documentation generation

Workflows are the core of the project, enabling tasks like repository synchronization (sync-forks.yml), badge injection (inject-badges.yml), and upstream tracking (sync-upstream-mirrors.yml). These workflows interact with git-based platforms via APIs and are triggered by events or schedules. Configuration files and scripts in the config/ and data/ directories provide customization and support for these workflows.

• ci.yaml: Executes the main CI pipeline, including linting, testing, and build steps. No secrets required.
• codeql-analysis.yml: Runs CodeQL for static code analysis to detect vulnerabilities. Requires GH_TOKEN secret.
• sync-forks.yml: Synchronizes forked repositories with their upstream counterparts. Requires GH_TOKEN secret.
• inject-badges.yml: Updates repository README files with status badges. Requires GH_TOKEN secret.
• mirror-orgs-full.yml: Mirrors all repositories in an organization across platforms. Requires GH_TOKEN and MIRROR_TOKEN secrets.
• update-readmes.yml: Automates README generation and updates. Requires GH_TOKEN secret.
• pr-gate.yml: Validates pull requests with tests and linting before merge. No secrets required.
• auto-merge-prs.yml: Automatically merges pull requests meeting predefined criteria. Requires GH_TOKEN secret.
• cleanup-branches.yml: Deletes stale branches from repositories. Requires GH_TOKEN secret.
• validate-config.yml: Validates configuration files for syntax and schema compliance. No secrets required.
• mirror-releases.yml: Mirrors release assets across platforms. Requires GH_TOKEN and MIRROR_TOKEN secrets.
• sync-upstream-mirrors.yml: Synchronizes upstream mirrors for repositories. Requires GH_TOKEN and MIRROR_TOKEN secrets.
• check-ci.yml: Ensures CI workflows are functioning correctly. No secrets required.

Origins

Logic extracted from

Inspired by

Used as reference

Auto-generated by generate-dep-graph.sh. Do not edit manually. Last generated: 2026-06-12 (stub — full graph generated on next scheduled run)

This graph maps every OSP-bound repo in Interested-Deving-1896 to its upstream origin(s), as declared in each repo's ## Origins README section.

Summary

• OSP-bound repos scanned: stub (full scan runs weekly via generate-dep-graph.yml)
• Tooling dependencies tracked: github-codeowners (CODEOWNERS auditing across all OSP repos)

Tooling Dependencies

Resources

Accessibility

This repo uses automated accessibility auditing via check-accessibility.yml.

Checks include: CODEOWNERS ownership coverage, README screen-reader compatibility, WCAG 2.1 AA HTML compliance, audio overview (espeak-ng), and Braille output (liblouis).

Run the Check Accessibility workflow to generate the first report and accessibility artifacts. See DOCS/accessibility.md for the full reference.

This repo is maintained in Interested-Deving-1896/fork-sync-all and mirrored through:

Interested-Deving-1896/fork-sync-all  ──►  OpenOS-Project-OSP/fork-sync-all  ──►  OpenOS-Project-Ecosystem-OOC/fork-sync-all

Changes flow downstream automatically via the hourly mirror chain in fork-sync-all. Direct commits to OSP or OOC are detected and opened as PRs back to Interested-Deving-1896.

Contributors

@Interested-Deving-1896: 480 commits @github-actions[bot]: 78 commits @actions-user: 7 commits @dependabot[bot]: 6 commits @web-flow: 5 commits

Note: This repository may be a mirror. Please refer to the upstream source for additional context.

License

GPL-3.0 © 2026 Interested-Deving-1896

Install

Usage

Configuration