ton/pi_harness
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(coding-agent): use gist token for issue analysis share

Browse Source
This commit is contained in:
Armin Ronacher
2026-07-06 01:06:41 +02:00
parent 3df11fd886
commit 010e519c90
1 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/issue-analysis.yml
+7 -6
View File
@@ -6,10 +6,11 @@
# (~/.pi/agent/auth.json). # (~/.pi/agent/auth.json).
# 2. Create the `pi-analyze` label. # 2. Create the `pi-analyze` label.
# 3. Add a repository secret `EARENDIL_ORG_READ_TOKEN` with permission to # 3. Add a repository secret `EARENDIL_ORG_READ_TOKEN` with permission to
# read `earendil-works` org membership and create secret gists. The # read `earendil-works` org membership. The authorization job uses it to
# authorization job uses it to verify that the label actor is an active # verify that the label actor is an active member of `earendil-works/staff`.
# member of `earendil-works/staff`; the analysis job uses it to upload # 4. Add an environment secret `PI_GIST_TOKEN` on `pi-analyze` with gist
# the exported session gist. # creation permission. The analysis job uses it to upload the exported
# session gist.
# #
# The session runs in a high-entropy checkout directory so the recorded cwd is # The session runs in a high-entropy checkout directory so the recorded cwd is
# a unique string. Import the session into a local checkout with the # a unique string. Import the session into a local checkout with the
@@ -202,10 +203,10 @@ jobs:
if: always() && steps.export_session_files.outcome == 'success' if: always() && steps.export_session_files.outcome == 'success'
shell: bash shell: bash
env: env:
GH_TOKEN: ${{ secrets.EARENDIL_ORG_READ_TOKEN }} GH_TOKEN: ${{ secrets.PI_GIST_TOKEN }}
run: | run: |
if [ -z "$GH_TOKEN" ]; then if [ -z "$GH_TOKEN" ]; then
echo "EARENDIL_ORG_READ_TOKEN is not configured" >&2 echo "PI_GIST_TOKEN is not configured" >&2
exit 1 exit 1
fi fi
gist_url="$(gh gist create --public=false "$RUNNER_TEMP/pi-out/session.html" "$RUNNER_TEMP/pi-out/session.jsonl")" gist_url="$(gh gist create --public=false "$RUNNER_TEMP/pi-out/session.html" "$RUNNER_TEMP/pi-out/session.jsonl")"