From 9704b5592362613358d7b729b67107a087a50424 Mon Sep 17 00:00:00 2001 From: admin Date: Wed, 8 Jul 2026 09:29:59 -0500 Subject: [PATCH] ci(zetesis): delegate gate-attestation to the fleet reusable Replace the inline copy (which lacked any release-please waiver, failing every release PR with 'No Gate-Passed trailer found') with a thin caller of the canonical reusable, pinned past the branch-shaped release-please waiver (forkwright/.github#10). One fact, one place. Gate-Passed: kanon 0.1.6 +stages:fmt,check,clippy,nextest,lint sha:38df1fa4545de5ddd6d163e331c57a7c1aabaec7 --- .github/workflows/gate-attestation.yml | 43 ++------------------------ 1 file changed, 3 insertions(+), 40 deletions(-) diff --git a/.github/workflows/gate-attestation.yml b/.github/workflows/gate-attestation.yml index 8731bae..bda4ed3 100644 --- a/.github/workflows/gate-attestation.yml +++ b/.github/workflows/gate-attestation.yml @@ -9,45 +9,8 @@ permissions: concurrency: group: ${{ github.workflow }}-${{ github.ref }} - cancel-in-progress: true + cancel-in-progress: ${{ github.event_name == 'pull_request' }} jobs: - gate-attestation: - name: gate-attestation - runs-on: ubuntu-latest - steps: - - name: Pass trusted automation PRs - if: ${{ github.actor == 'dependabot[bot]' || github.actor == 'release-please[bot]' }} - run: echo "Gate attestation waived for trusted automation actor." - - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - if: ${{ github.actor != 'dependabot[bot]' && github.actor != 'release-please[bot]' }} - with: - fetch-depth: 0 - persist-credentials: false - - - name: Verify Gate-Passed trailer - if: ${{ github.actor != 'dependabot[bot]' && github.actor != 'release-please[bot]' }} - run: | - commits=$(git log --format="%H" "origin/${{ github.base_ref }}..HEAD") - if [ -z "$commits" ]; then - echo "ERROR: No commits found in PR" - exit 1 - fi - - found=false - for sha in $commits; do - body=$(git log -1 --format="%b" "$sha") - if echo "$body" | grep -q "^Gate-Passed:"; then - version=$(echo "$body" | grep "^Gate-Passed:" | head -1) - echo "Found gate attestation: $version" - found=true - break - fi - done - - if [ "$found" = false ]; then - echo "ERROR: No Gate-Passed trailer found in any PR commit." - echo "Run the local gate and commit with the trailer." - exit 1 - fi + gate: + uses: forkwright/.github/.github/workflows/gate-attestation.yml@5be130bfebd5165d3221f1896f96b5ce6e93bf9b