fix: configura autenticacao git no codenarc action para evitar erro 128

[anaalves-asaas]

Impacto

Configurada autenticação git no CodeNarc para resolver erro 128 que ocorria ao tentar fazer git fetch sem credenciais. O github_token já era passado para o container, mas não estava configurado para operações git.

Mudança:

• Adicionada configuração de autenticação git usando o token do GitHub já disponível
• Git agora usa automaticamente o token para operações HTTPS

Causa raiz: O token do GitHub era usado apenas para a API do reviewdog, mas não estava configurado para autenticação de operações git (fetch/pull). Com fetch-depth: 2 no checkout, commits mais antigos não estavam disponíveis localmente, causando falha ao tentar fetch.

Cenários testados

• Antes da correção (com erro)

⚠️  Analisando se as P1s estão em linhas alteradas...
fatal: could not read Username for 'https://github.com': No such device or address
Error: Process completed with exit code 128.

https://github.com/asaasdev/asaas/pull/55852

https://github.com/asaasdev/asaas/actions/runs/21633090397/job/62354435129

• Depois da correção (funcionando)

⚠️  Analisando se as P1s estão em linhas alteradas...
✅ Todas as violações P1 estão fora das linhas alteradas → merge permitido
🏁 Análise de CodeNarc concluída com sucesso.

https://github.com/asaasdev/asaas/pull/56274

https://github.com/asaasdev/asaas/actions/runs/21645188804/job/62395693545

Validação de retrocompatibilidade

• Não há impacto de retrocompatibilidade - mudança isolada no script do CodeNarc Action, token já estava disponível

[github-actions]

📝 [shellcheck] _{reported by reviewdog 🐶}
Double quote to prevent globbing and word splitting. SC2086

codenarc-docker/entrypoint.sh

Line 27 in d60758f

$includes_arg >/dev/null 2>&1

[github-actions]

📝 [shellcheck] _{reported by reviewdog 🐶}
Double quote to prevent globbing and word splitting. SC2086

codenarc-docker/entrypoint.sh

Line 66 in d60758f

${INPUT_REVIEWDOG_FLAGS} >/dev/null || true

[github-actions]

📝 [shellcheck] _{reported by reviewdog 🐶}
Double quote to prevent globbing and word splitting. SC2086

codenarc-docker/entrypoint.sh

Line 76 in d60758f

${INPUT_REVIEWDOG_FLAGS} >/dev/null || true

[github-actions]

📝 [shellcheck] _{reported by reviewdog 🐶}
Double quote to prevent globbing and word splitting. SC2086

codenarc-docker/entrypoint.sh

Line 86 in d60758f

${INPUT_REVIEWDOG_FLAGS} >/dev/null || true

[github-actions]

[shellcheck (suggestion)] _{reported by reviewdog 🐶}

codenarc-docker/entrypoint.sh

Line 27 in d60758f

$includes_arg >/dev/null 2>&1

[github-actions]

[shellcheck (suggestion)] _{reported by reviewdog 🐶}

codenarc-docker/entrypoint.sh

Line 66 in d60758f

${INPUT_REVIEWDOG_FLAGS} >/dev/null || true

[github-actions]

[shellcheck (suggestion)] _{reported by reviewdog 🐶}

codenarc-docker/entrypoint.sh

Line 76 in d60758f

${INPUT_REVIEWDOG_FLAGS} >/dev/null || true

[github-actions]

[shellcheck (suggestion)] _{reported by reviewdog 🐶}

codenarc-docker/entrypoint.sh

Line 86 in d60758f

${INPUT_REVIEWDOG_FLAGS} >/dev/null || true

[amazon-q-developer]

Review Summary

This PR configures Git authentication to resolve error 128 during git fetch operations. The implementation correctly checks for token presence and configures git to use it for HTTPS operations.

Critical Issue Found

• Security vulnerability: Current implementation embeds token in git config URL, which can leak in verbose output and error messages

Recommendation

Replace the URL rewrite approach with git credential helper to prevent token exposure in logs while maintaining the same functionality.

---

You can now have the agent implement changes and create commits directly on your pull request's source branch. Simply comment with /q followed by your request in natural language to ask the agent to make changes.

[github-actions]

🏷️ [bumpr]
Next version:2.11.0
Changes:2.10.0...asaasdev:corrige-erro-128-codenarc-action

[github-actions]

📝 [shellcheck] _{reported by reviewdog 🐶}
Expressions don't expand in single quotes, use double quotes for that. SC2016

[github-actions]

🚀 [bumpr] Bumped!
New version:2.11.0
Changes:2.10.0...2.11.0