Skip to content

test: auto verify-report bot authorship (throwaway) #14

test: auto verify-report bot authorship (throwaway)

test: auto verify-report bot authorship (throwaway) #14

Workflow file for this run

name: verify-report
# On every data/verifier PR, post the Tier 0 verification band report as
# TechEngineBot. The bot's token lives in TechEngine, so we RELAY there (a comment
# posted from TechAPI would be authored by the human relay PAT, not the bot).
# TechEngine's techapi-verify-comment.yml runs app.verify (mode=tier0) and posts
# the report. Informational; never gates a merge. Same-repo PRs only.
on:
pull_request:
types: [opened, synchronize, reopened, ready_for_review]
paths:
- "data/**"
- "app/validate.py"
- "app/verify/**"
permissions:
contents: read
concurrency:
group: verify-report-${{ github.event.pull_request.number }}
cancel-in-progress: true
jobs:
relay:
runs-on: ubuntu-latest
if: github.event.pull_request.head.repo.full_name == github.repository
env:
ENGINE_TOKEN: ${{ secrets.ENGINE_TOKEN }}
steps:
- name: Dormant when ENGINE_TOKEN is unset
if: env.ENGINE_TOKEN == ''
run: echo "::warning::ENGINE_TOKEN not configured; cannot relay the verify report to TechEngine."
- name: Relay Tier 0 verify report to TechEngine
if: env.ENGINE_TOKEN != ''
uses: actions/github-script@v7
with:
github-token: ${{ secrets.ENGINE_TOKEN }}
script: |
await github.rest.repos.createDispatchEvent({
owner: 'GetTechAPI',
repo: 'TechEngine',
event_type: 'techapi-verify',
client_payload: {
pr_number: String(context.payload.pull_request.number),
head_sha: context.payload.pull_request.head.sha,
mode: 'tier0',
requested_by: context.payload.pull_request.user.login,
},
});
core.info(`relayed tier0 verify report for PR #${context.payload.pull_request.number}`);