From eeebf2c8f399d0dadae55e27818a44e0d8c50e4e Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 16 Feb 2026 13:48:33 +0000
Subject: [PATCH 1/3] Initial plan


From 9611aa179d7f48e8c8eb94ee67335f0b5cf00876 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 16 Feb 2026 13:51:23 +0000
Subject: [PATCH 2/3] Create run-tests-cloud.yml with updated production
 environment variables

Co-authored-by: peter-leonov-ch <209667683+peter-leonov-ch@users.noreply.github.com>
---
 .github/workflows/run-tests-cloud.yml | 53 +++++++++++++++++++++++++++
 1 file changed, 53 insertions(+)
 create mode 100644 .github/workflows/run-tests-cloud.yml

diff --git a/.github/workflows/run-tests-cloud.yml b/.github/workflows/run-tests-cloud.yml
new file mode 100644
index 00000000..1b076458
--- /dev/null
+++ b/.github/workflows/run-tests-cloud.yml
@@ -0,0 +1,53 @@
+name: Cloud tests
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  run:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: true
+      matrix:
+        go:
+          - "oldstable"
+          - "stable"
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Install Go
+        uses: actions/setup-go@v6
+        with:
+          go-version: ${{ matrix.go }}
+
+      - name: Get Go environment
+        id: go-env
+        run: |
+          echo "::set-output name=cache::$(go env GOCACHE)"
+          echo "::set-output name=modcache::$(go env GOMODCACHE)"
+
+      - name: Set up cache
+        uses: actions/cache@v5
+        with:
+          path: |
+            ${{ steps.go-env.outputs.cache }}
+            ${{ steps.go-env.outputs.modcache }}
+          key: cloud-${{ runner.os }}-go${{ matrix.go }}-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            cloud-${{ runner.os }}-go${{ matrix.go }}-
+
+      - name: Run tests
+        env:
+          CLICKHOUSE_USE_DOCKER: false
+          CLICKHOUSE_USE_SSL: true
+          CLICKHOUSE_HOST: ${{ secrets.INTEGRATIONS_TEAM_TESTS_CLOUD_HOST_SMT_PROD }}
+          CLICKHOUSE_PASSWORD: ${{ secrets.INTEGRATIONS_TEAM_TESTS_CLOUD_PASSWORD_SMT_PROD }}
+          CLICKHOUSE_JWT: ${{ secrets.INTEGRATIONS_TEAM_TESTS_CLOUD_JWT_DESERT_VM_43_PROD }}
+          TESTCONTAINERS_RYUK_DISABLED: "true"
+          GOTOOLCHAIN: "local"
+        run: |
+          go test -v ./...

From 4231e575cf31384e8c777728c1d945b17f77b7a2 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Mon, 16 Feb 2026 13:53:26 +0000
Subject: [PATCH 3/3] Add explicit permissions to run-tests-cloud workflow for
 security

Co-authored-by: peter-leonov-ch <209667683+peter-leonov-ch@users.noreply.github.com>
---
 .github/workflows/run-tests-cloud.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/run-tests-cloud.yml b/.github/workflows/run-tests-cloud.yml
index 1b076458..930988bf 100644
--- a/.github/workflows/run-tests-cloud.yml
+++ b/.github/workflows/run-tests-cloud.yml
@@ -10,6 +10,8 @@ on:
 jobs:
   run:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       fail-fast: true
       matrix: