fix: install prepublication judge runtime (#3132)

This commit is contained in:
Patrick Erichsen
2026-07-16 20:36:41 -07:00
committed by GitHub
parent f5ce8d702f
commit 352b901c77
2 changed files with 13 additions and 3 deletions
@@ -59,7 +59,7 @@ jobs:
fail-fast: false
max-parallel: 2
matrix:
shard: [0, 1]
shard: ${{ fromJSON(github.event_name == 'workflow_dispatch' && inputs['attempt-id'] != '' && '[0]' || '[0,1]') }}
env:
CONVEX_URL: ${{ vars.CONVEX_URL || vars.VITE_CONVEX_URL || 'https://wry-manatee-359.convex.cloud' }}
PREPUBLICATION_CHECK_LIMIT: ${{ inputs['batch-limit'] || '2' }}
@@ -77,6 +77,12 @@ jobs:
- uses: ./.github/actions/setup-bun
- name: Install Codex CLI
run: |
set -euo pipefail
npm install -g @openai/codex@0.142.3
codex --version
- name: Install ClawScan CLI
run: |
set -euo pipefail
@@ -95,7 +95,9 @@ describe("pre-publication publish worker workflow", () => {
expect(job.environment).toBe("Production");
expect(job["runs-on"]).toBe("${{ inputs.runner || 'blacksmith-8vcpu-ubuntu-2404' }}");
expect(job["timeout-minutes"]).toBe(20);
expect(job.strategy?.matrix?.shard).toEqual([0, 1]);
expect(job.strategy?.matrix?.shard).toBe(
"${{ fromJSON(github.event_name == 'workflow_dispatch' && inputs['attempt-id'] != '' && '[0]' || '[0,1]') }}",
);
expect(job.strategy?.["max-parallel"]).toBe(2);
expect(job.env).toMatchObject({
CONVEX_URL:
@@ -124,7 +126,9 @@ describe("pre-publication publish worker workflow", () => {
expect(steps.find((step) => step.name === "Install ClawScan CLI")?.run).toContain(
"npm install -g @openclaw/clawscan@0.1.4",
);
expect(steps.find((step) => step.name === "Install Codex CLI")).toBeUndefined();
expect(steps.find((step) => step.name === "Install Codex CLI")?.run).toContain(
"npm install -g @openai/codex@0.142.3",
);
expect(steps.find((step) => step.name === "Authenticate Codex CLI")).toBeUndefined();
expect(steps.find((step) => step.name === "Install SkillSpector")).toBeUndefined();
expect(JSON.stringify(job)).not.toContain("CODEX_SECURITY_SCAN_SHADOW_CLAWSCAN");