summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorYuriy Andamasov <yuriy@vyos.io>2026-05-30 02:17:34 +0300
committerGitHub <noreply@github.com>2026-05-30 02:17:34 +0300
commitbadcf6a31a060c0020947d684166bd14c9ae3caf (patch)
tree14c37cc82215bf212ade0dcd9d170aea0abb2b4f
parent9f463cf3608a83c31f1e44b21aa1818a26d751ff (diff)
downloadlibpam-radius-auth-current.tar.gz
libpam-radius-auth-current.zip
T8943: migrate mirror wrapper to App-ready uniform stub (rollout 1b Task 5) (#24)HEADcurrent
Switches explicit secrets: PAT/REMOTE_OWNER pass-through to secrets: inherit and adopts the uniform stub with vars.MIRROR_ENABLED kill-switch (default-on). Plan: ~/.claude/plans/2026-05-26-mirror-rollout-1b-revised.md Task 5 🤖 Generated by [robots](https://vyos.io)
-rw-r--r--.github/workflows/pr-mirror-repo-sync.yml27
1 files changed, 11 insertions, 16 deletions
diff --git a/.github/workflows/pr-mirror-repo-sync.yml b/.github/workflows/pr-mirror-repo-sync.yml
index 88fb563..0f6c449 100644
--- a/.github/workflows/pr-mirror-repo-sync.yml
+++ b/.github/workflows/pr-mirror-repo-sync.yml
@@ -1,3 +1,6 @@
+# .github/workflows/pr-mirror-repo-sync.yml
+# DO NOT EDIT — managed by mirror-pipeline rollout.
+# To opt out: set vars.MIRROR_ENABLED=false in this repo's Actions variables.
name: PR Mirror and Repo Sync
on:
@@ -7,29 +10,21 @@ on:
workflow_dispatch:
inputs:
sync_branch:
- description: 'Branch to mirror'
required: true
- default: 'current'
- type: choice
- options:
- - current
+ type: string
permissions:
- pull-requests: write
contents: write
+ pull-requests: write
issues: write
jobs:
- call-pr-mirror-repo-sync:
+ call:
if: |
- github.repository_owner == 'vyos' &&
- (
- github.event_name == 'workflow_dispatch' ||
- (github.event_name == 'pull_request_target' && github.event.pull_request.merged == true)
- )
+ github.repository_owner == 'vyos'
+ && (github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch')
+ && vars.MIRROR_ENABLED != 'false'
uses: vyos/.github/.github/workflows/pr-mirror-repo-sync.yml@current
with:
- sync_branch: ${{ github.event.inputs.sync_branch || 'current' }}
- secrets:
- PAT: ${{ secrets.PAT }}
- REMOTE_OWNER: ${{ secrets.REMOTE_OWNER }}
+ sync_branch: ${{ inputs.sync_branch || github.event.pull_request.base.ref }}
+ secrets: inherit