diff options
| author | Yuriy Andamasov <yuriy@vyos.io> | 2026-05-30 02:41:44 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-05-30 02:41:44 +0300 |
| commit | 3d89ca8e26a98c927f74668a867f40284681ba27 (patch) | |
| tree | 1f3a843ff38cb9314d91a2efbafde26c4bcf6b55 /.github/workflows | |
| parent | bb79a965515b6939b7ca8f4ed4df786883ad3e15 (diff) | |
| download | vyatta-bash-3d89ca8e26a98c927f74668a867f40284681ba27.tar.gz vyatta-bash-3d89ca8e26a98c927f74668a867f40284681ba27.zip | |
T8943: migrate mirror wrapper to App-ready uniform stub (rollout 1b Task 5) (#31)
Replace PAT-based secrets passthrough with uniform App-ready stub.
Adds MIRROR_ENABLED opt-out guard and aligns to fleet-standard shape.
Plan: ~/.claude/plans/2026-05-26-mirror-rollout-1b-revised.md Task 5
🤖 Generated by [robots](https://vyos.io)
Diffstat (limited to '.github/workflows')
| -rw-r--r-- | .github/workflows/pr-mirror-repo-sync.yml | 27 |
1 files changed, 11 insertions, 16 deletions
diff --git a/.github/workflows/pr-mirror-repo-sync.yml b/.github/workflows/pr-mirror-repo-sync.yml index 88fb563..0f6c449 100644 --- a/.github/workflows/pr-mirror-repo-sync.yml +++ b/.github/workflows/pr-mirror-repo-sync.yml @@ -1,3 +1,6 @@ +# .github/workflows/pr-mirror-repo-sync.yml +# DO NOT EDIT — managed by mirror-pipeline rollout. +# To opt out: set vars.MIRROR_ENABLED=false in this repo's Actions variables. name: PR Mirror and Repo Sync on: @@ -7,29 +10,21 @@ on: workflow_dispatch: inputs: sync_branch: - description: 'Branch to mirror' required: true - default: 'current' - type: choice - options: - - current + type: string permissions: - pull-requests: write contents: write + pull-requests: write issues: write jobs: - call-pr-mirror-repo-sync: + call: if: | - github.repository_owner == 'vyos' && - ( - github.event_name == 'workflow_dispatch' || - (github.event_name == 'pull_request_target' && github.event.pull_request.merged == true) - ) + github.repository_owner == 'vyos' + && (github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch') + && vars.MIRROR_ENABLED != 'false' uses: vyos/.github/.github/workflows/pr-mirror-repo-sync.yml@current with: - sync_branch: ${{ github.event.inputs.sync_branch || 'current' }} - secrets: - PAT: ${{ secrets.PAT }} - REMOTE_OWNER: ${{ secrets.REMOTE_OWNER }} + sync_branch: ${{ inputs.sync_branch || github.event.pull_request.base.ref }} + secrets: inherit |