Skip to content

Commit 023db07

Browse files
committed
fix(ci): publish same-repo status with workflow token
1 parent e576f7f commit 023db07

2 files changed

Lines changed: 8 additions & 3 deletions

File tree

‎.github/workflows/opencode-review-dispatch.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7830,14 +7830,14 @@ jobs:
78307830
&& needs.validate-pr-metadata.outputs.target_repository != ''
78317831
&& needs.validate-pr-metadata.outputs.head_sha != ''
78327832
env:
7833-
GH_TOKEN: ${{ secrets.PR_REVIEW_MERGE_TOKEN || secrets.OPENCODE_APPROVE_TOKEN || steps.opencode_app_token.outputs.token || github.token }}
7833+
GH_TOKEN: ${{ needs.validate-pr-metadata.outputs.target_repository == github.repository && github.token || secrets.PR_REVIEW_MERGE_TOKEN || secrets.OPENCODE_APPROVE_TOKEN || steps.opencode_app_token.outputs.token || github.token }}
78347834
GH_REPOSITORY: ${{ needs.validate-pr-metadata.outputs.target_repository }}
78357835
PR_NUMBER: ${{ needs.validate-pr-metadata.outputs.pr_number }}
78367836
PR_HEAD_SHA: ${{ needs.validate-pr-metadata.outputs.head_sha }}
78377837
RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
78387838
OPENCODE_MODEL_POOL_OUTCOME: ${{ steps.opencode_review_model_pool.outputs.review_status }}
78397839
COVERAGE_EVIDENCE_RESULT: ${{ needs.coverage-evidence.result }}
7840-
OPENCODE_STATUS_TOKEN_SOURCE: ${{ secrets.PR_REVIEW_MERGE_TOKEN != '' && 'PR_REVIEW_MERGE_TOKEN' || secrets.OPENCODE_APPROVE_TOKEN != '' && 'OPENCODE_APPROVE_TOKEN' || steps.opencode_app_token.outputs.available == 'true' && 'opencode-app' || 'github-token' }}
7840+
OPENCODE_STATUS_TOKEN_SOURCE: ${{ needs.validate-pr-metadata.outputs.target_repository == github.repository && 'github-token' || secrets.PR_REVIEW_MERGE_TOKEN != '' && 'PR_REVIEW_MERGE_TOKEN' || secrets.OPENCODE_APPROVE_TOKEN != '' && 'OPENCODE_APPROVE_TOKEN' || steps.opencode_app_token.outputs.available == 'true' && 'opencode-app' || 'github-token' }}
78417841
OPENCODE_CHANGED_FILES_FILE: ${{ runner.temp }}/opencode-changed-files.txt
78427842
OPENCODE_ARTIFACT_MANIFEST_SHA256: ${{ steps.seal_artifacts.outputs.manifest_sha256 }}
78437843
OPENCODE_SOURCE_WORKDIR: ${{ runner.temp }}/opencode-pr-head

‎tests/test_opencode_agent_contract.py‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2033,11 +2033,16 @@ def test_opencode_runs_merge_scheduler_after_review_without_repo_local_dispatch(
20332033
" - name: Dispatch Noema after current-head OpenCode approval", 1
20342034
)[0]
20352035
assert (
2036-
"GH_TOKEN: ${{ secrets.PR_REVIEW_MERGE_TOKEN || "
2036+
"GH_TOKEN: ${{ needs.validate-pr-metadata.outputs.target_repository == "
2037+
"github.repository && github.token || secrets.PR_REVIEW_MERGE_TOKEN || "
20372038
"secrets.OPENCODE_APPROVE_TOKEN || steps.opencode_app_token.outputs.token || "
20382039
"github.token }}"
20392040
) in status_step
20402041
assert "OPENCODE_STATUS_TOKEN_SOURCE" in status_step
2042+
assert (
2043+
"needs.validate-pr-metadata.outputs.target_repository == github.repository && "
2044+
"'github-token'"
2045+
) in status_step
20412046
assert "steps.opencode_app_token.outputs.available == 'true' && 'opencode-app'" in status_step
20422047
assert "OPENCODE_CHANGED_FILES_FILE" in status_step
20432048
assert "OPENCODE_ARTIFACT_MANIFEST_SHA256" in status_step

0 commit comments

Comments
 (0)