From f91419b0aa4659d8c895d7fc5c418df1f6ec26ea Mon Sep 17 00:00:00 2001 From: Nathan Gillett Date: Sat, 9 May 2026 20:39:39 -0500 Subject: [PATCH 1/2] ci: fix cert-bot conformance root publish for new files Stage conformance JSON before comparing to HEAD; git diff --quiet on paths does not detect untracked files, so the first root commit was skipped. Co-authored-by: Cursor --- .github/workflows/conformance-attestation.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/conformance-attestation.yml b/.github/workflows/conformance-attestation.yml index 84e18e7..99db5ea 100644 --- a/.github/workflows/conformance-attestation.yml +++ b/.github/workflows/conformance-attestation.yml @@ -133,7 +133,8 @@ jobs: set -euo pipefail cp intentproof-spec/conformance-certificate.json conformance-certificate.json cp intentproof-spec/conformance-report.json conformance-report.json - if git diff --quiet -- conformance-certificate.json conformance-report.json; then + git add conformance-certificate.json conformance-report.json + if git diff --cached --quiet; then echo "No conformance artifact updates to commit." exit 0 fi @@ -141,6 +142,5 @@ jobs: git config user.email "intentproof-cert-bot[bot]@users.noreply.github.com" git config --local --unset-all http.https://github.com/.extraheader || true git remote set-url origin "https://x-access-token:${INTENTPROOF_CERT_BOT_TOKEN}@github.com/${GITHUB_REPOSITORY}.git" - git add conformance-certificate.json conformance-report.json git commit -m "chore(ci): update conformance certificate and report" git push From 2f5eee1b2c6de20780138841d7c5723c4cb696a5 Mon Sep 17 00:00:00 2001 From: Nathan Gillett Date: Sat, 9 May 2026 21:03:11 -0500 Subject: [PATCH 2/2] ci: scope cert-bot commit to conformance JSON only Restrict staged diff and commit to conformance-certificate/report paths. Co-authored-by: Cursor --- .github/workflows/conformance-attestation.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/conformance-attestation.yml b/.github/workflows/conformance-attestation.yml index 99db5ea..dfca944 100644 --- a/.github/workflows/conformance-attestation.yml +++ b/.github/workflows/conformance-attestation.yml @@ -134,7 +134,7 @@ jobs: cp intentproof-spec/conformance-certificate.json conformance-certificate.json cp intentproof-spec/conformance-report.json conformance-report.json git add conformance-certificate.json conformance-report.json - if git diff --cached --quiet; then + if git diff --cached --quiet -- conformance-certificate.json conformance-report.json; then echo "No conformance artifact updates to commit." exit 0 fi @@ -142,5 +142,5 @@ jobs: git config user.email "intentproof-cert-bot[bot]@users.noreply.github.com" git config --local --unset-all http.https://github.com/.extraheader || true git remote set-url origin "https://x-access-token:${INTENTPROOF_CERT_BOT_TOKEN}@github.com/${GITHUB_REPOSITORY}.git" - git commit -m "chore(ci): update conformance certificate and report" + git commit -m "chore(ci): update conformance certificate and report" -- conformance-certificate.json conformance-report.json git push