Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 7 additions & 3 deletions .github/scripts/pr-verify/workflow.test.mjs
Original file line number Diff line number Diff line change
Expand Up @@ -609,11 +609,15 @@ test("a handoff leaves exactly one lane record, from the job that saw its end",
}
});

test("every ci-workflows action is pinned to one commit", () => {
const refs = [...text.matchAll(/uses: melodic-software\/ci-workflows\/[^@\s]+@([0-9a-f]{40}) # \S.*$/gm)].map((m) => m[1]);
assert.equal(refs.length, (text.match(/melodic-software\/ci-workflows\//g) ?? []).length, "every ref is a SHA pin with a comment");
test("every ci-workflows action is pinned to one commit, report-lane-outcome to its own", () => {
const all = [...text.matchAll(/uses: melodic-software\/ci-workflows\/([^@\s]+)@([0-9a-f]{40}) # \S.*$/gm)].map((m) => ({ action: m[1], sha: m[2] }));
assert.equal(all.length, (text.match(/melodic-software\/ci-workflows\//g) ?? []).length, "every ref is a SHA pin with a comment");
const isReport = (r) => r.action.endsWith("/report-lane-outcome");
const refs = all.filter((r) => !isReport(r)).map((r) => r.sha);
const reportRefs = all.filter(isReport).map((r) => r.sha);
assert.ok(refs.length >= 6);
assert.equal(new Set(refs).size, 1, `one pin: ${[...new Set(refs)].join(", ")}`);
assert.equal(new Set(reportRefs).size, 1, `one report-lane-outcome pin: ${[...new Set(reportRefs)].join(", ")}`);
});

test("the resolver reads the trusted-actor list from main in both jobs", () => {
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/maintenance-audit-lane-runs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -371,7 +371,7 @@ jobs:

- name: Report the judgment's outcome
if: (steps.judge.outcome == 'success' || steps.judge.outcome == 'failure') && (steps.judge.outputs.handoff != 'true' || steps.key-leg.outcome == 'failure')
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.judge.outcome }}
execution-file: ${{ steps.judge.outputs.execution-file }}
Expand Down Expand Up @@ -714,7 +714,7 @@ jobs:

- name: Report the judgment's outcome
if: (steps.judge.outcome == 'success' || steps.judge.outcome == 'failure') && (steps.judge.outputs.handoff != 'true' || steps.sub-leg.outcome == 'failure')
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.judge.outcome }}
execution-file: ${{ steps.judge.outputs.execution-file }}
Expand Down Expand Up @@ -1002,7 +1002,7 @@ jobs:

- name: Report the judgment's outcome
if: steps.judge.outcome == 'success' || steps.judge.outcome == 'failure'
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.judge.outcome }}
execution-file: ${{ steps.judge.outputs.execution-file }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/post-merge-test-mutation.yml
Original file line number Diff line number Diff line change
Expand Up @@ -361,7 +361,7 @@ jobs:
- name: Record the lane outcome
id: lane-record
if: always() && (steps.audit.outcome == 'success' || steps.audit.outcome == 'failure')
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.audit.outcome }}
execution-file: >-
Expand Down
24 changes: 12 additions & 12 deletions .github/workflows/pr-review-main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -630,7 +630,7 @@ jobs:

- name: Report chunk 1's outcome
if: (steps.review-1.outcome == 'success' || steps.review-1.outcome == 'failure') && steps.review-1.outputs.handoff != 'true'
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.review-1.outcome }}
execution-file: ${{ steps.review-1.outputs.execution-file }}
Expand Down Expand Up @@ -697,7 +697,7 @@ jobs:

- name: Report chunk 2's outcome
if: (steps.review-2.outcome == 'success' || steps.review-2.outcome == 'failure') && steps.review-2.outputs.handoff != 'true'
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.review-2.outcome }}
execution-file: ${{ steps.review-2.outputs.execution-file }}
Expand Down Expand Up @@ -764,7 +764,7 @@ jobs:

- name: Report chunk 3's outcome
if: (steps.review-3.outcome == 'success' || steps.review-3.outcome == 'failure') && steps.review-3.outputs.handoff != 'true'
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.review-3.outcome }}
execution-file: ${{ steps.review-3.outputs.execution-file }}
Expand Down Expand Up @@ -831,7 +831,7 @@ jobs:

- name: Report chunk 4's outcome
if: (steps.review-4.outcome == 'success' || steps.review-4.outcome == 'failure') && steps.review-4.outputs.handoff != 'true'
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.review-4.outcome }}
execution-file: ${{ steps.review-4.outputs.execution-file }}
Expand Down Expand Up @@ -1446,7 +1446,7 @@ jobs:

- name: Report chunk 1's outcome
if: (steps.review-1.outcome == 'success' || steps.review-1.outcome == 'failure') && steps.review-1.outputs.handoff != 'true'
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.review-1.outcome }}
execution-file: ${{ steps.review-1.outputs.execution-file }}
Expand Down Expand Up @@ -1516,7 +1516,7 @@ jobs:

- name: Report chunk 2's outcome
if: (steps.review-2.outcome == 'success' || steps.review-2.outcome == 'failure') && steps.review-2.outputs.handoff != 'true'
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.review-2.outcome }}
execution-file: ${{ steps.review-2.outputs.execution-file }}
Expand Down Expand Up @@ -1586,7 +1586,7 @@ jobs:

- name: Report chunk 3's outcome
if: (steps.review-3.outcome == 'success' || steps.review-3.outcome == 'failure') && steps.review-3.outputs.handoff != 'true'
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.review-3.outcome }}
execution-file: ${{ steps.review-3.outputs.execution-file }}
Expand Down Expand Up @@ -1656,7 +1656,7 @@ jobs:

- name: Report chunk 4's outcome
if: (steps.review-4.outcome == 'success' || steps.review-4.outcome == 'failure') && steps.review-4.outputs.handoff != 'true'
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.review-4.outcome }}
execution-file: ${{ steps.review-4.outputs.execution-file }}
Expand Down Expand Up @@ -2264,7 +2264,7 @@ jobs:

- name: Report chunk 1's outcome
if: (steps.review-1.outcome == 'success' || steps.review-1.outcome == 'failure') && steps.review-1.outputs.handoff != 'true'
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.review-1.outcome }}
execution-file: ${{ steps.review-1.outputs.execution-file }}
Expand Down Expand Up @@ -2333,7 +2333,7 @@ jobs:

- name: Report chunk 2's outcome
if: (steps.review-2.outcome == 'success' || steps.review-2.outcome == 'failure') && steps.review-2.outputs.handoff != 'true'
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.review-2.outcome }}
execution-file: ${{ steps.review-2.outputs.execution-file }}
Expand Down Expand Up @@ -2402,7 +2402,7 @@ jobs:

- name: Report chunk 3's outcome
if: (steps.review-3.outcome == 'success' || steps.review-3.outcome == 'failure') && steps.review-3.outputs.handoff != 'true'
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.review-3.outcome }}
execution-file: ${{ steps.review-3.outputs.execution-file }}
Expand Down Expand Up @@ -2471,7 +2471,7 @@ jobs:

- name: Report chunk 4's outcome
if: (steps.review-4.outcome == 'success' || steps.review-4.outcome == 'failure') && steps.review-4.outputs.handoff != 'true'
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.review-4.outcome }}
execution-file: ${{ steps.review-4.outputs.execution-file }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/pr-run-activity-read.yml
Original file line number Diff line number Diff line change
Expand Up @@ -1812,7 +1812,7 @@ jobs:
&& (steps.act-key.outcome == 'success' || steps.act-key.outcome == 'failure'
|| steps.act-token.outcome == 'success' || steps.act-token.outcome == 'failure'
|| steps.act-fallback.outcome == 'success' || steps.act-fallback.outcome == 'failure')
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.act-key.outcome != 'skipped' && steps.act-key.outcome || steps.act-token.outcome != 'skipped' && steps.act-token.outcome || steps.act-fallback.outcome }}
execution-file: ${{ steps.act-key.outputs.execution-file || steps.act-token.outputs.execution-file || steps.act-fallback.outputs.execution-file }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/pr-run-activity-write.yml
Original file line number Diff line number Diff line change
Expand Up @@ -1793,7 +1793,7 @@ jobs:
- name: Record the lane outcome
id: lane-record
if: always() && (steps.act-skill.outcome == 'success' || steps.act-skill.outcome == 'failure')
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@2476d5dde8979eab34374150b7e4b0a2b99f4e88 # 2476d5d 2026-10-29
uses: melodic-software/ci-workflows/.github/actions/report-lane-outcome@c41e3457e01c9ff6ca2c3d10e5bf470551383e11 # c41e345 2026-11-01
with:
outcome: ${{ steps.act-result.outputs.outcome || steps.act-skill.outcome }}
execution-file: >-
Expand Down
Loading
Loading