Skip to content

fix(ci): weekly self-scan installs the checkout, not a stale v0.5.4 tag #106

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
bkd-dotcom merged 1 commit into from
Aug 31, 2026
Merged

fix(ci): weekly self-scan installs the checkout, not a stale v0.5.4 tag #106

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 10 additions & 4 deletions .github/workflows/signetry-autofix.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -66,9 +66,13 @@ jobs:
python-version: "3.12"

- name: Install Signetry
# signetry-core is source-available (All Rights Reserved) and not on PyPI —
# install it from the source repo by tag.
run: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.5.4"
# This IS the signetry-core repo, so install the checkout rather than a
# published tag: the weekly self-scan must exercise the code on main, and a
# hard-coded tag silently drifts behind it (the v0.5.4 pin here outlived the
# umbra -> signetry rename and broke the run, because that tag's metadata
# still declared name = "umbra-core"). Downstream repos install by tag —
# see .github/workflows in Signetry/autofix-demo for that shape.
run: pip install .

- name: Install the executor CLI
env:
Expand Down Expand Up @@ -252,5 +256,7 @@ jobs:
if: always()
with:
name: signetry-autofix
path: ${{ env.OUT }}/scan-and-fixes.json
# Deterministic path, not ${{ env.OUT }}: env.OUT is only set once the scan
# step runs, so an earlier failure made this resolve to "/scan-and-fixes.json".
path: ${{ runner.temp }}/signetry/scan-and-fixes.json
if-no-files-found: ignore
Loading