From 0fe0fa2275a2ea8ac920e2eaef4008f4bcd3937a Mon Sep 17 00:00:00 2001
From: Mary Dickson <mary.dickson@virtru.com>
Date: Wed, 15 Jul 2026 07:55:56 -0700
Subject: [PATCH] feat(ci): run quickstart stack test nightly with Slack
 failure alert

The quickstart docker-compose stack test only runs on push/PR to
static/quickstart/, tests/, and docs/getting-started/, so upstream
breaking changes can silently break the quickstart with no signal.

- Add a nightly schedule trigger (cron 17 6 * * *)
- Add a Slack notification on failure, scoped to scheduled runs only
  (github.event_name == 'schedule'), so PR runs never touch the secret

Requires a SLACK_WEBHOOK_URL repo secret (Incoming Webhook for
#alerts-opentdf).

Closes #355

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Mary Dickson <mary.dickson@virtru.com>
---
 .github/workflows/docker-compose-test.yml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/.github/workflows/docker-compose-test.yml b/.github/workflows/docker-compose-test.yml
index 135192cf..b3a3b0ca 100644
--- a/.github/workflows/docker-compose-test.yml
+++ b/.github/workflows/docker-compose-test.yml
@@ -15,6 +15,8 @@ on:
       - 'tests/**'
       - '.github/workflows/docker-compose-test.yml'
       - 'docs/getting-started/**'
+  schedule:
+    - cron: '17 6 * * *'
   workflow_dispatch:
 
 jobs:
@@ -197,3 +199,17 @@ jobs:
         run: |
           docker compose ps
           docker compose logs
+
+      - name: Notify Slack on failure
+        if: failure() && github.event_name == 'schedule'
+        uses: slackapi/slack-github-action@v2.1.0
+        with:
+          webhook: ${{ secrets.SLACK_WEBHOOK_URL }}
+          webhook-type: incoming-webhook
+          payload: |
+            text: "Quickstart stack test failed on nightly run"
+            blocks:
+              - type: "section"
+                text:
+                  type: "mrkdwn"
+                  text: ":red_circle: *Quickstart stack test failed*\nThe nightly docker-compose stack test is failing — the quickstart is broken for new users.\n<${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|View run>"