Skip to content

DEV3-5474 fix: move TABNINE_CLI_TRUST_WORKSPACE to the agent invocation step#36

Merged
arturfromtabnine merged 1 commit into
mainfrom
fix/trust-workspace-on-agent-step
May 15, 2026
Merged

DEV3-5474 fix: move TABNINE_CLI_TRUST_WORKSPACE to the agent invocation step#36
arturfromtabnine merged 1 commit into
mainfrom
fix/trust-workspace-on-agent-step

Conversation

@arturfromtabnine
Copy link
Copy Markdown
Contributor

@arturfromtabnine arturfromtabnine commented May 15, 2026

Summary

  • The TABNINE_CLI_TRUST_WORKSPACE: "true" env added in DEV3-5474: add TABNINE_CLI_TRUST_WORKSPACE=true env var #35 was placed on the Authenticate GitHub CLI step, which only runs gh auth login — not the tabnine CLI.
  • Step-level env: does not flow to subsequent steps in a composite action, so by the time the actual ~/.local/bin/tabnine invocation step ran, the env var was unset and the CLI exited with code 55:
Tabnine CLI is not running in a trusted directory. To proceed, either use
`--skip-trust`, set the `TABNINE_CLI_TRUST_WORKSPACE=true` environment
variable, or trust this directory in interactive mode.
Error: Process completed with exit code 55.
  • This breaks every consumer running on @main after the tabnine-cli feat(cli): secure .env loading and enforce workspace trust in headless mode change.

Fix

Move the env var onto the ${{ inputs.step_name }} step (the one that actually invokes the CLI), and drop it from the gh auth step where it had no effect.

Test plan

  • Pin a downstream workflow to this branch and confirm the agent runs past the trust check
  • Re-run a previously failing PR review and confirm the agent posts comments / summary

🤖 Generated with Claude Code

The env var was set on the `Authenticate GitHub CLI` step, which only
runs `gh auth login` — not the tabnine CLI. Step-level `env:` does not
flow to later steps in a composite action, so by the time the actual
`~/.local/bin/tabnine` invocation step ran, `TABNINE_CLI_TRUST_WORKSPACE`
was unset and the CLI exited with code 55:

> Tabnine CLI is not running in a trusted directory. To proceed, either
> use `--skip-trust`, set the `TABNINE_CLI_TRUST_WORKSPACE=true`
> environment variable, or trust this directory in interactive mode.

Move the env var onto the `${{ inputs.step_name }}` step (the one that
actually runs the CLI) and drop it from the gh auth step where it had
no effect.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@arturfromtabnine arturfromtabnine changed the title fix: move TABNINE_CLI_TRUST_WORKSPACE to the agent invocation step DEV3-5474 fix: move TABNINE_CLI_TRUST_WORKSPACE to the agent invocation step May 15, 2026
@arturfromtabnine arturfromtabnine merged commit d9063c5 into main May 15, 2026
1 of 3 checks passed
@arturfromtabnine arturfromtabnine deleted the fix/trust-workspace-on-agent-step branch May 15, 2026 08:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants