From b103d8a5962e25db9ef83e0af3441a4c6ee49ea1 Mon Sep 17 00:00:00 2001
From: Chris Raethke <chris@codesoda.com>
Date: Sun, 8 Mar 2026 17:30:45 +1000
Subject: [PATCH 1/2] ci: add test suite workflow and README badge

Add a GitHub Actions workflow that runs all test scripts on pushes to
main and on pull requests. Add a CI status badge to the top of README.
---
 .github/workflows/tests.yml | 44 +++++++++++++++++++++++++++++++++++++
 README.md                   |  2 ++
 2 files changed, 46 insertions(+)
 create mode 100644 .github/workflows/tests.yml

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
new file mode 100644
index 000000000..8eda4518c
--- /dev/null
+++ b/.github/workflows/tests.yml
@@ -0,0 +1,44 @@
+name: Tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  tests:
+    name: Test suite
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Run lib unit tests
+        run: bash tests/lib_unit_test.sh
+
+      - name: Run mocked run_index smoke tests
+        run: bash tests/run_index_mock_smoke.sh
+
+      - name: Run atomic index mid-run failure tests
+        run: bash tests/atomic_index_midrun_failure_test.sh
+
+      - name: Run embed env hardening tests
+        run: bash tests/embed_env_hardening_test.sh
+
+      - name: Run empty repo tests
+        run: bash tests/empty_repo_test.sh
+
+      - name: Run grep fallback tests
+        run: bash tests/grep_fallback_test.sh
+
+      - name: Run trap cleanup tests
+        run: bash tests/trap_cleanup_test.sh
+
+      - name: Run render PDF smoke tests
+        run: bash tests/render_pdf_smoke_test.sh
+
+      - name: Run render system map smoke tests
+        run: bash tests/render_system_map_smoke_test.sh
+
+      - name: Run manifest integrity tests
+        run: bash tests/manifest_integrity_test.sh
diff --git a/README.md b/README.md
index ddb243a21..39f24d1b8 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,7 @@
 # vibe-code-audit
 
+[![Tests](https://github.com/codesoda/vibe-code-audit/actions/workflows/tests.yml/badge.svg?branch=main)](https://github.com/codesoda/vibe-code-audit/actions/workflows/tests.yml)
+
 Repo-wide audit skill for "vibe-coded" codebases (parallel feature development, semantic duplication, inconsistent cross-cutting concerns, and architectural drift).
 
 ## Prerequisites

From 1619c0c42a7738890dad8159894d217203a9bb54 Mon Sep 17 00:00:00 2001
From: Chris Raethke <chris@codesoda.com>
Date: Sun, 8 Mar 2026 17:31:47 +1000
Subject: [PATCH 2/2] ci: run install-sh-check on pushes to main

---
 .github/workflows/install-sh-check.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/install-sh-check.yml b/.github/workflows/install-sh-check.yml
index 1c2c35a35..430b59b94 100644
--- a/.github/workflows/install-sh-check.yml
+++ b/.github/workflows/install-sh-check.yml
@@ -1,6 +1,8 @@
 name: Check install.sh
 
 on:
+  push:
+    branches: [main]
   pull_request:
 
 jobs: