From 81c268acd40172da4bb949eabe29aea09e3a09e7 Mon Sep 17 00:00:00 2001 From: Nathan Gillett Date: Thu, 7 May 2026 23:19:16 -0500 Subject: [PATCH] fix(ci): skip cert-bot pushes to stop conformance artifact loop Pushes from the cert bot retriggered CI; fresh oracle output always changes timestamps so another commit+push ran forever. Skip mint/publish when actor is the cert bot (align INTENTPROOF_CERT_BOT_ACTOR slug with the GitHub App if yours is not intentproof-cert-bot). Co-authored-by: Cursor --- .github/workflows/ci.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 98174d8..65b57c9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -139,14 +139,15 @@ jobs: - name: Mint cert-bot installation token id: cert_bot_token - if: ${{ github.event_name == 'push' && (github.ref_name == 'main' || github.ref_name == 'master') && github.actor != 'github-actions[bot]' }} + # Skip when the cert bot pushed: its commit would re-run conformance and loop (new issuedAt/generatedAt each run). + if: ${{ github.event_name == 'push' && (github.ref_name == 'main' || github.ref_name == 'master') && github.actor != 'github-actions[bot]' && github.actor != 'intentproof-cert-bot[bot]' }} uses: actions/create-github-app-token@v1 with: app-id: ${{ vars.INTENTPROOF_CERT_BOT_ID }} private-key: ${{ secrets.INTENTPROOF_CERT_BOT_PRIVATE_KEY }} - name: Publish conformance certificate and report at repo root - if: ${{ github.event_name == 'push' && (github.ref_name == 'main' || github.ref_name == 'master') && github.actor != 'github-actions[bot]' }} + if: ${{ github.event_name == 'push' && (github.ref_name == 'main' || github.ref_name == 'master') && github.actor != 'github-actions[bot]' && github.actor != 'intentproof-cert-bot[bot]' }} env: INTENTPROOF_CERT_BOT_TOKEN: ${{ steps.cert_bot_token.outputs.token }} run: |