summaryrefslogtreecommitdiff
path: root/.github/workflows
diff options
context:
space:
mode:
authorYuriy Andamasov <yuriy@vyos.io>2026-05-30 02:41:36 +0300
committerGitHub <noreply@github.com>2026-05-30 02:41:36 +0300
commit7c93fedc8d9fafa09011cbb6ac97ea7ab746443c (patch)
treeff721b8dd1824b141618b87c05cd2a74cd91cef2 /.github/workflows
parent2b70b3e1e2ca7181c043f08d2213e1f627fef7a1 (diff)
downloadcommunity.vyos.net-7c93fedc8d9fafa09011cbb6ac97ea7ab746443c.tar.gz
community.vyos.net-7c93fedc8d9fafa09011cbb6ac97ea7ab746443c.zip
T8943: migrate mirror wrapper to App-ready uniform stub (rollout 1b Task 5) (#56)
Replace PAT-based secrets with App-token-compatible `secrets: inherit` and standardise wrapper to the uniform stub shape for rollout 1b. Plan: ~/.claude/plans/2026-05-26-mirror-rollout-1b-revised.md Task 5 🤖 Generated by [robots](https://vyos.io)
Diffstat (limited to '.github/workflows')
-rw-r--r--.github/workflows/pr-mirror-repo-sync.yml27
1 files changed, 11 insertions, 16 deletions
diff --git a/.github/workflows/pr-mirror-repo-sync.yml b/.github/workflows/pr-mirror-repo-sync.yml
index 0a8a031..508ec4a 100644
--- a/.github/workflows/pr-mirror-repo-sync.yml
+++ b/.github/workflows/pr-mirror-repo-sync.yml
@@ -1,3 +1,6 @@
+# .github/workflows/pr-mirror-repo-sync.yml
+# DO NOT EDIT — managed by mirror-pipeline rollout.
+# To opt out: set vars.MIRROR_ENABLED=false in this repo's Actions variables.
name: PR Mirror and Repo Sync
on:
@@ -7,29 +10,21 @@ on:
workflow_dispatch:
inputs:
sync_branch:
- description: 'Branch to mirror'
required: true
- default: 'main'
- type: choice
- options:
- - main
+ type: string
permissions:
- pull-requests: write
contents: write
+ pull-requests: write
issues: write
jobs:
- call-pr-mirror-repo-sync:
+ call:
if: |
- github.repository_owner == 'vyos' &&
- (
- github.event_name == 'workflow_dispatch' ||
- (github.event_name == 'pull_request_target' && github.event.pull_request.merged == true)
- )
+ github.repository_owner == 'vyos'
+ && (github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch')
+ && vars.MIRROR_ENABLED != 'false'
uses: vyos/.github/.github/workflows/pr-mirror-repo-sync.yml@current
with:
- sync_branch: ${{ github.event.inputs.sync_branch || 'main' }}
- secrets:
- PAT: ${{ secrets.PAT }}
- REMOTE_OWNER: ${{ secrets.REMOTE_OWNER }}
+ sync_branch: ${{ inputs.sync_branch || github.event.pull_request.base.ref }}
+ secrets: inherit