Public Semaphore build project

[AleksandarCole]

We have discussed this prior to the launch of Community Edition Semaphore, and it popped up again in this ticket:
#84

However, there are still a few unknowns so I'm opening a discussion to help scope this out.

---

Problem Statement

We've launched Semaphore Community Edition as an open source project, but our CI/CD infrastructure is still running in a private Semaphore project. This prevents external contributors from seeing build results for their PRs, which is crucial for a successful open source project.

Current State

• Community Edition is publicly available on GitHub
• CI/CD runs in a private Semaphore project
• Forked PRs don't trigger builds visible to contributors
• Current workflow handles both CI and CD for Cloud version

Desired Outcome

A public CI pipeline that:

• Runs on all PRs including those from forks
• Provides visible feedback to external contributors
• Maintains security while exposing only what's necessary
• Works alongside our internal CD pipeline

Discussion Points

• What should the public CI pipeline include and exclude?

  • Test coverage
  • Linting
  • Security scanning

• What modifications are needed to our existing pipeline?

  • Separation of CI from CD
  • Security considerations for public builds
  • Managing environment variables and secrets

• How will the public CI and internal CD pipelines coexist?

  • Trigger mechanisms
  • Shared resources
  • Communication between pipelines

Next Steps

Let's discuss these points and define a clear implementation plan that balances openness for contributors with security for our deployment process.

[AleksandarCole]

@lucaspin is working on this initiative, but we agreed that @VeljkoMaksimovic will help us out in:

• Documenting this process
• Documenting how and who approves/runs external builds
• Ensure that this process is setup and followed initially

Acceptance Criteria (by apr 14th):

• Forked PRs trigger builds on public project
• We know how to merge forked PRs and it's well documented