Skip to content

fix CI artifact push back #22

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
negillett merged 3 commits into from
May 8, 2026
Merged

fix CI artifact push back #22

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
4e43657
fix(conformance): refresh root certificate/report for release
May 8, 2026
8515f49
ci(conformance): require successful cert-bot push-back
May 8, 2026
5b3b1d2
chore(ci): drop manual conformance artifact refresh
May 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 14 additions & 6 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -135,8 +135,18 @@ jobs:
path: intentproof-spec/conformance-certificate.json
if-no-files-found: error

- name: Mint cert-bot installation token
id: cert_bot_token
if: ${{ github.event_name == 'push' && (github.ref_name == 'main' || github.ref_name == 'master') && github.actor != 'github-actions[bot]' }}
uses: actions/create-github-app-token@v1
with:
app-id: ${{ vars.INTENTPROOF_CERT_BOT_ID }}
private-key: ${{ secrets.INTENTPROOF_CERT_BOT_PRIVATE_KEY }}

- name: Publish conformance certificate and report at repo root
if: ${{ github.event_name == 'push' && (github.ref_name == 'main' || github.ref_name == 'master') && github.actor != 'github-actions[bot]' }}
env:
INTENTPROOF_CERT_BOT_TOKEN: ${{ steps.cert_bot_token.outputs.token }}
run: |
set -euo pipefail
cp intentproof-spec/conformance-certificate.json conformance-certificate.json
Expand All @@ -145,14 +155,12 @@ jobs:
echo "No conformance artifact updates to commit."
exit 0
fi
git config user.name "github-actions[bot]"
git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
git config user.name "intentproof-cert-bot[bot]"
git config user.email "intentproof-cert-bot[bot]@users.noreply.github.com"
git remote set-url origin "https://x-access-token:${INTENTPROOF_CERT_BOT_TOKEN}@github.com/${GITHUB_REPOSITORY}.git"
git add conformance-certificate.json conformance-report.json
git commit -m "chore(ci): update conformance certificate and report"
if ! git push; then
echo "::warning::Unable to push conformance artifacts from this workflow context; leaving check green and relying on artifact uploads."
exit 0
fi
git push

spec-golden-parity:
runs-on: ubuntu-latest
Expand Down