From 0e0ad13beb357b83faffcda48586641ebfd88b7b Mon Sep 17 00:00:00 2001 From: Yuriy Andamasov Date: Wed, 12 Aug 2026 21:52:35 +0300 Subject: fix: address adversarial-review findings (validate error visibility + portable paste snippets) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - validate.yml: stream curl output directly; the response=$(...) capture under set -euo pipefail swallowed the validation error body on non-2xx (job failed with a bare exit code and no explanation) - AGENTS.md + README.md: quote the ?ref=production endpoint (zsh globs bare ?) and fetch via Accept: application/vnd.github.raw instead of jq + base64 (BSD/GNU base64 flag drift) codecov.yml payload unchanged (byte-frozen to spec Appendix B). T9078: IS-609 🤖 Generated by [robots](https://vyos.io) --- AGENTS.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'AGENTS.md') diff --git a/AGENTS.md b/AGENTS.md index 8a2dc4c..fc6d9b6 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -17,5 +17,5 @@ This repo holds the **Codecov Global YAML** for the `vyos` GitHub organization. 2. Keep `codecov.yml` comment-free — Codecov strips comments on dashboard save; any explanatory content lives here in AGENTS.md or in README.md. 3. After merge to `production`, operator pastes from - `gh api repos/vyos/codecov/contents/codecov.yml?ref=production --jq '.content' | base64 -d` + `gh api 'repos/vyos/codecov/contents/codecov.yml?ref=production' -H "Accept: application/vnd.github.raw"` into the dashboard. Repo is the source of truth; dashboard is a cache. -- cgit v1.2.3