From 46088d880543b960a17793397a974769d02376ce Mon Sep 17 00:00:00 2001 From: CTO Hermes Date: Tue, 2 Jun 2026 14:16:20 +0700 Subject: [PATCH 1/4] chore: update all repo URLs from ajianaz/cora-cli to codecoradev/cora-cli MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Post-migration branding update across all files. No functional changes — URL references only. Closes #123 --- .github/actions/cora-review-simple/action.yml | 6 ++--- .github/actions/cora-review/action.yml | 14 ++++++------ .github/workflows/release.yml | 4 ++-- AGENT.md | 2 +- CHANGELOG.md | 22 +++++++++---------- CONTRIBUTING.md | 4 ++-- Cargo.toml | 2 +- README.md | 14 ++++++------ src/commands/init.rs | 2 +- .../src/routes/docs/changelog/+page.svelte | 2 +- .../src/routes/docs/installation/+page.svelte | 6 ++--- 11 files changed, 39 insertions(+), 39 deletions(-) diff --git a/.github/actions/cora-review-simple/action.yml b/.github/actions/cora-review-simple/action.yml index cbaf77ef..2de51759 100644 --- a/.github/actions/cora-review-simple/action.yml +++ b/.github/actions/cora-review-simple/action.yml @@ -42,7 +42,7 @@ runs: # Try up to 3 times with delay for i in 1 2 3; do VERSION=$(curl -sfL --connect-timeout 10 \ - https://api.github.com/repos/ajianaz/cora-cli/releases/latest \ + https://api.github.com/repos/codecoradev/cora-cli/releases/latest \ | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('tag_name', ''))" 2>/dev/null) if [ -n "$VERSION" ]; then break @@ -73,7 +73,7 @@ runs: echo "Unsupported architecture: $ARCH" exit 1 fi - curl -sL "https://github.com/ajianaz/cora-cli/releases/download/${{ steps.resolve.outputs.VERSION }}/${ASSET}-${{ steps.resolve.outputs.VERSION }}.tar.gz" | tar xz -C /usr/local/bin cora + curl -sL "https://github.com/codecoradev/cora-cli/releases/download/${{ steps.resolve.outputs.VERSION }}/${ASSET}-${{ steps.resolve.outputs.VERSION }}.tar.gz" | tar xz -C /usr/local/bin cora chmod +x /usr/local/bin/cora cora --version @@ -154,7 +154,7 @@ runs: hasWarnings ? '⚠️ **Review recommended** — warnings found.' : '✅ **Passed** — only informational notes.'; - body = `## 🔍 Cora AI Code Review\n\n${status}\n${table}\n---\n_Review powered by [cora-cli](https://github.com/ajianaz/cora-cli) · BYOK · MIT_`; + body = `## 🔍 Cora AI Code Review\n\n${status}\n${table}\n---\n_Review powered by [cora-cli](https://github.com/codecoradev/cora-cli) · BYOK · MIT_`; } } diff --git a/.github/actions/cora-review/action.yml b/.github/actions/cora-review/action.yml index e7b91aa4..a2b9022c 100644 --- a/.github/actions/cora-review/action.yml +++ b/.github/actions/cora-review/action.yml @@ -58,7 +58,7 @@ runs: if [ "$INPUT_VERSION" = "latest" ]; then for i in 1 2 3; do VERSION=$(curl -sfL --connect-timeout 10 \ - https://api.github.com/repos/ajianaz/cora-cli/releases/latest \ + https://api.github.com/repos/codecoradev/cora-cli/releases/latest \ | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('tag_name', ''))" 2>/dev/null) if [ -n "$VERSION" ]; then break @@ -90,9 +90,9 @@ runs: echo "Unsupported architecture: $ARCH" exit 1 fi - curl -sL "https://github.com/ajianaz/cora-cli/releases/download/${CORA_VERSION}/${ASSET}-${CORA_VERSION}.tar.gz" \ + curl -sL "https://github.com/codecoradev/cora-cli/releases/download/${CORA_VERSION}/${ASSET}-${CORA_VERSION}.tar.gz" \ -o /tmp/cora.tar.gz - curl -sL "https://github.com/ajianaz/cora-cli/releases/download/${CORA_VERSION}/checksums-sha256.txt" \ + curl -sL "https://github.com/codecoradev/cora-cli/releases/download/${CORA_VERSION}/checksums-sha256.txt" \ -o /tmp/cora-checksums.txt || true if [ -f /tmp/cora-checksums.txt ] && [ -s /tmp/cora-checksums.txt ]; then EXPECTED=$(grep "${ASSET}-${CORA_VERSION}.tar.gz" /tmp/cora-checksums.txt | awk '{print $1}' || true) @@ -170,14 +170,14 @@ runs: fileSize = 0; } if (fileSize < 10) { - body = `## 🔍 Cora AI Code Review\n\n⚠️ **Review could not complete.** Cora produced an empty result. Check the workflow logs for errors.\n\n---\n_Review powered by [cora-cli](https://github.com/ajianaz/cora-cli) · BYOK · MIT_`; + body = `## 🔍 Cora AI Code Review\n\n⚠️ **Review could not complete.** Cora produced an empty result. Check the workflow logs for errors.\n\n---\n_Review powered by [cora-cli](https://github.com/codecoradev/cora-cli) · BYOK · MIT_`; } else { - body = `## 🔍 Cora AI Code Review\n\n✅ **No issues found.** Code looks good!\n\n---\n_Review powered by [cora-cli](https://github.com/ajianaz/cora-cli) · BYOK · MIT_`; + body = `## 🔍 Cora AI Code Review\n\n✅ **No issues found.** Code looks good!\n\n---\n_Review powered by [cora-cli](https://github.com/codecoradev/cora-cli) · BYOK · MIT_`; } } else { const results = sarifContent.runs[0].results || []; if (results.length === 0) { - body = `## 🔍 Cora AI Code Review\n\n✅ **No issues found.** Code looks good!\n\n---\n_Review powered by [cora-cli](https://github.com/ajianaz/cora-cli) · BYOK · MIT_`; + body = `## 🔍 Cora AI Code Review\n\n✅ **No issues found.** Code looks good!\n\n---\n_Review powered by [cora-cli](https://github.com/codecoradev/cora-cli) · BYOK · MIT_`; } else { const grouped = {}; for (const r of results) { @@ -208,7 +208,7 @@ runs: hasWarnings ? '⚠️ **Review recommended** — warnings found.' : '✅ **Passed** — only informational notes.'; - body = `## 🔍 Cora AI Code Review\n\n${status}\n${table}\n---\n_Review powered by [cora-cli](https://github.com/ajianaz/cora-cli) · BYOK · MIT_`; + body = `## 🔍 Cora AI Code Review\n\n${status}\n${table}\n---\n_Review powered by [cora-cli](https://github.com/codecoradev/cora-cli) · BYOK · MIT_`; } } diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index cf9c203f..5a2f470f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -163,7 +163,7 @@ jobs: printf '# Install via cargo\n' printf 'cargo install cora\n\n' printf '# Or download binary (extracts as '\''cora'\'')\n' - printf 'curl -fsSL https://github.com/ajianaz/cora-cli/releases/latest/download/cora-x86_64-unknown-linux-gnu-%s.tar.gz | tar xz\n' "${{ steps.version.outputs.TAG }}" + printf 'curl -fsSL https://github.com/codecoradev/cora-cli/releases/latest/download/cora-x86_64-unknown-linux-gnu-%s.tar.gz | tar xz\n' "${{ steps.version.outputs.TAG }}" printf 'chmod +x cora\n' printf 'sudo mv cora /usr/local/bin/\n\n' printf '# Init project\n' @@ -171,7 +171,7 @@ jobs: printf '# Review staged changes\n' printf 'CORA_API_KEY=your-key cora review --staged\n' printf '```\n\n' - printf '**Full changelog:** https://github.com/ajianaz/cora-cli/blob/develop/CHANGELOG.md\n' + printf '**Full changelog:** https://github.com/codecoradev/cora-cli/blob/develop/CHANGELOG.md\n' } > release-notes.md - name: Create GitHub Release diff --git a/AGENT.md b/AGENT.md index b6e7dea4..0e5007ae 100644 --- a/AGENT.md +++ b/AGENT.md @@ -7,7 +7,7 @@ no managed API, no cloud service. Runs locally against diffs, scans, or branches - **License:** MIT - **Edition:** Rust 2024 (MSRV 1.85) -- **Repo:** `ajianaz/cora-cli` +- **Repo:** `codecoradev/cora-cli` - **Default branch:** `develop` ## Build & Development Commands diff --git a/CHANGELOG.md b/CHANGELOG.md index f5d9b2ce..ae4d686e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -204,14 +204,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - **Cross-platform** — Linux (x86_64, ARM64), macOS (Apple Silicon), Windows (x86_64) - **MIT License** — fully open source -[Unreleased]: https://github.com/ajianaz/cora-cli/compare/v0.2.0...develop -[0.2.0]: https://github.com/ajianaz/cora-cli/compare/v0.1.8...v0.2.0 -[0.1.8]: https://github.com/ajianaz/cora-cli/compare/v0.1.7...v0.1.8 -[0.1.7]: https://github.com/ajianaz/cora-cli/compare/v0.1.6...v0.1.7 -[0.1.6]: https://github.com/ajianaz/cora-cli/compare/v0.1.5...v0.1.6 -[0.1.5]: https://github.com/ajianaz/cora-cli/compare/v0.1.4...v0.1.5 -[0.1.4]: https://github.com/ajianaz/cora-cli/compare/v0.1.3...v0.1.4 -[0.1.3]: https://github.com/ajianaz/cora-cli/compare/v0.1.2...v0.1.3 -[0.1.2]: https://github.com/ajianaz/cora-cli/compare/v0.1.1...v0.1.2 -[0.1.1]: https://github.com/ajianaz/cora-cli/compare/v0.1.0...v0.1.1 -[0.1.0]: https://github.com/ajianaz/cora-cli/releases/tag/v0.1.0 +[Unreleased]: https://github.com/codecoradev/cora-cli/compare/v0.2.0...develop +[0.2.0]: https://github.com/codecoradev/cora-cli/compare/v0.1.8...v0.2.0 +[0.1.8]: https://github.com/codecoradev/cora-cli/compare/v0.1.7...v0.1.8 +[0.1.7]: https://github.com/codecoradev/cora-cli/compare/v0.1.6...v0.1.7 +[0.1.6]: https://github.com/codecoradev/cora-cli/compare/v0.1.5...v0.1.6 +[0.1.5]: https://github.com/codecoradev/cora-cli/compare/v0.1.4...v0.1.5 +[0.1.4]: https://github.com/codecoradev/cora-cli/compare/v0.1.3...v0.1.4 +[0.1.3]: https://github.com/codecoradev/cora-cli/compare/v0.1.2...v0.1.3 +[0.1.2]: https://github.com/codecoradev/cora-cli/compare/v0.1.1...v0.1.2 +[0.1.1]: https://github.com/codecoradev/cora-cli/compare/v0.1.0...v0.1.1 +[0.1.0]: https://github.com/codecoradev/cora-cli/releases/tag/v0.1.0 diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index fe48c044..9ec39324 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -29,7 +29,7 @@ Be respectful, constructive, and inclusive. We follow the [Rust Code of Conduct] ```bash # Clone the repository -git clone https://github.com/ajianaz/cora-cli.git +git clone https://github.com/codecoradev/cora-cli.git cd cora-cli # Build in debug mode @@ -137,7 +137,7 @@ mod tests { ## Reporting Bugs -Please open a [GitHub Issue](https://github.com/ajianaz/cora-cli/issues/new) with: +Please open a [GitHub Issue](https://github.com/codecoradev/cora-cli/issues/new) with: - **Description** — What happened vs. what you expected - **Steps to reproduce** — Minimal reproduction steps diff --git a/Cargo.toml b/Cargo.toml index c994920a..142248c6 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -4,7 +4,7 @@ version = "0.2.0" edition = "2024" description = "CLI-first AI code review — BYOK, diff/scan/branch, pre-commit hooks" license = "MIT" -repository = "https://github.com/ajianaz/cora-cli" +repository = "https://github.com/codecoradev/cora-cli" readme = "README.md" keywords = ["cli", "code-review", "ai", "git", "pre-commit"] categories = ["command-line-utilities", "development-tools"] diff --git a/README.md b/README.md index af698d2c..409690bd 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@ **AI-Powered Code Review CLI** -[![CI](https://github.com/ajianaz/cora-cli/actions/workflows/ci.yml/badge.svg)](https://github.com/ajianaz/cora-cli/actions/workflows/ci.yml) +[![CI](https://github.com/codecoradev/cora-cli/actions/workflows/ci.yml/badge.svg)](https://github.com/codecoradev/cora-cli/actions/workflows/ci.yml) [![Crates.io](https://img.shields.io/crates/v/cora-cli.svg)](https://crates.io/crates/cora-cli) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) [![Rust](https://img.shields.io/badge/Rust-1.85+-orange.svg)](https://www.rust-lang.org/) @@ -42,7 +42,7 @@ cargo install cora-cli ### Binary Download -Download the latest release from [GitHub Releases](https://github.com/ajianaz/cora-cli/releases): +Download the latest release from [GitHub Releases](https://github.com/codecoradev/cora-cli/releases): ```bash # Determine your platform tag from the releases page, e.g.: @@ -52,12 +52,12 @@ Download the latest release from [GitHub Releases](https://github.com/ajianaz/co # cora-x86_64-pc-windows-msvc-v0.2.0.zip # Example: Linux aarch64 -VERSION=$(curl -s https://api.github.com/repos/ajianaz/cora-cli/releases/latest | grep tag_name | cut -d'"' -f4) -curl -L "https://github.com/ajianaz/cora-cli/releases/download/${VERSION}/cora-aarch64-unknown-linux-gnu-${VERSION}.tar.gz" | tar xz +VERSION=$(curl -s https://api.github.com/repos/codecoradev/cora-cli/releases/latest | grep tag_name | cut -d'"' -f4) +curl -L "https://github.com/codecoradev/cora-cli/releases/download/${VERSION}/cora-aarch64-unknown-linux-gnu-${VERSION}.tar.gz" | tar xz sudo mv cora /usr/local/bin/ ``` -> **Tip:** Visit the [Releases page](https://github.com/ajianaz/cora-cli/releases) to find the correct asset name for your platform. +> **Tip:** Visit the [Releases page](https://github.com/codecoradev/cora-cli/releases) to find the correct asset name for your platform. ### Homebrew @@ -68,7 +68,7 @@ sudo mv cora /usr/local/bin/ Requires **Rust 1.85+**. ```bash -git clone https://github.com/ajianaz/cora-cli.git +git clone https://github.com/codecoradev/cora-cli.git cd cora-cli cargo install --path . ``` @@ -351,7 +351,7 @@ Or install manually: # Manual install in CI - name: Install cora-cli run: | - curl -fsSL https://github.com/ajianaz/cora-cli/releases/latest/download/cora-x86_64-unknown-linux-gnu.tar.gz | tar xz + curl -fsSL https://github.com/codecoradev/cora-cli/releases/latest/download/cora-x86_64-unknown-linux-gnu.tar.gz | tar xz sudo mv cora /usr/local/bin/ ``` diff --git a/src/commands/init.rs b/src/commands/init.rs index 05ee31e0..f2786368 100644 --- a/src/commands/init.rs +++ b/src/commands/init.rs @@ -4,7 +4,7 @@ use tracing::debug; /// Example .cora.yaml template content. const CONFIG_TEMPLATE: &str = r#"# Cora Code Review Configuration -# See: https://github.com/ajianaz/cora-cli +# See: https://github.com/codecoradev/cora-cli # Provider settings provider: diff --git a/website/src/routes/docs/changelog/+page.svelte b/website/src/routes/docs/changelog/+page.svelte index 7fc52d13..1811adc6 100644 --- a/website/src/routes/docs/changelog/+page.svelte +++ b/website/src/routes/docs/changelog/+page.svelte @@ -9,7 +9,7 @@ categories: { type: string; items: string[] }[]; } - const REPO = 'https://github.com/ajianaz/cora-cli'; + const REPO = 'https://github.com/codecoradev/cora-cli'; function parseChangelog(md: string): ChangelogSection[] { const sections: ChangelogSection[] = []; diff --git a/website/src/routes/docs/installation/+page.svelte b/website/src/routes/docs/installation/+page.svelte index d57f4a59..45363f01 100644 --- a/website/src/routes/docs/installation/+page.svelte +++ b/website/src/routes/docs/installation/+page.svelte @@ -60,7 +60,7 @@

Download Binary

-

Pre-built binaries are available from the GitHub Releases page.

+

Pre-built binaries are available from the GitHub Releases page.

Supported platforms:

@@ -80,7 +80,7 @@
# Download and extract
-
$ curl -sL https://github.com/ajianaz/cora-cli/releases/latest/download/cora-linux-x86_64.tar.gz | tar xz
+
$ curl -sL https://github.com/codecoradev/cora-cli/releases/latest/download/cora-linux-x86_64.tar.gz | tar xz
$ mv cora ~/.local/bin/cora
@@ -97,7 +97,7 @@
-
$ git clone https://github.com/ajianaz/cora-cli.git
+
$ git clone https://github.com/codecoradev/cora-cli.git
$ cd cora-cli
$ cargo build --release
# Binary at target/release/cora
From 1bdb28fb707466aa969287b764ce2709af6f6208 Mon Sep 17 00:00:00 2001 From: CTO Hermes Date: Tue, 2 Jun 2026 14:21:10 +0700 Subject: [PATCH 2/4] fix: add Infisical fallback to org secrets for CI Infisical OIDC subject not configured for codecoradev org yet. This adds continue-on-error + fallback to org secrets (CORA_API_KEY, CORA_BASE_URL, CORA_MODEL). Closes #124 --- .github/actions/cora-review/action.yml | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/.github/actions/cora-review/action.yml b/.github/actions/cora-review/action.yml index a2b9022c..5db1df95 100644 --- a/.github/actions/cora-review/action.yml +++ b/.github/actions/cora-review/action.yml @@ -40,7 +40,9 @@ inputs: runs: using: 'composite' steps: - - name: Fetch LLM secrets from Infisical + - name: Fetch LLM secrets from Infisical (with fallback to org secrets) + id: infisical + continue-on-error: true uses: Infisical/secrets-action@8a06c1bdcd5b8635d510c52d4b57a92c1ccef785 # v1.0.9 with: method: 'oidc' @@ -49,6 +51,20 @@ runs: env-slug: ${{ inputs.infisical-env }} domain: ${{ inputs.infisical-domain }} + - name: Fallback to org secrets if Infisical failed + shell: bash + env: + CORA_API_KEY_FALLBACK: ${{ secrets.CORA_API_KEY }} + CORA_BASE_URL_FALLBACK: ${{ secrets.CORA_BASE_URL }} + CORA_MODEL_FALLBACK: ${{ secrets.CORA_MODEL }} + run: | + if [ "${{ steps.infisical.outcome }}" != "success" ]; then + echo "::warning::Infisical OIDC failed, falling back to org secrets" + echo "CORA_API_KEY=$CORA_API_KEY_FALLBACK" >> $GITHUB_ENV + echo "CORA_BASE_URL=$CORA_BASE_URL_FALLBACK" >> $GITHUB_ENV + echo "CORA_MODEL=$CORA_MODEL_FALLBACK" >> $GITHUB_ENV + fi + - name: Resolve cora-cli version id: resolve shell: bash From dd681f7d47880432ab6db3942dfff844b1e86e1f Mon Sep 17 00:00:00 2001 From: CTO Hermes Date: Tue, 2 Jun 2026 14:24:51 +0700 Subject: [PATCH 3/4] =?UTF-8?q?refactor:=20remove=20Infisical=20OIDC=20?= =?UTF-8?q?=E2=80=94=20use=20org=20secrets=20directly?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit All CI workflows now read secrets directly from GitHub org secrets (CORA_API_KEY, CORA_BASE_URL, CORA_MODEL, CARGO_REGISTRY_TOKEN, CLOUDFLARE_API_TOKEN, CLOUDFLARE_ACCOUNT_ID). Infisical OIDC removed from: - .github/actions/cora-review/action.yml (replaced with secrets.*) - .github/workflows/cora-review.yml (removed infisical-identity-id) - .github/workflows/release.yml (CARGO_REGISTRY_TOKEN direct) - .github/workflows/deploy-website.yml (CF token direct) Note: CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID need to be added as org or repo secrets in codecoradev. --- .github/actions/cora-review/action.yml | 48 +++----------------------- .github/workflows/cora-review.yml | 1 - .github/workflows/deploy-website.yml | 13 ++----- .github/workflows/release.yml | 11 +----- 4 files changed, 7 insertions(+), 66 deletions(-) diff --git a/.github/actions/cora-review/action.yml b/.github/actions/cora-review/action.yml index 5db1df95..bd05201b 100644 --- a/.github/actions/cora-review/action.yml +++ b/.github/actions/cora-review/action.yml @@ -1,5 +1,5 @@ name: 'Cora AI Code Review' -description: 'Run cora AI code review on a PR diff — posts a PR comment. Uses Infisical OIDC for LLM secrets (zero keys in GitHub). SARIF upload is optional.' +description: 'Run cora AI code review on a PR diff. Uses org secrets (CORA_API_KEY, CORA_BASE_URL, CORA_MODEL). Posts PR comment with findings.' inputs: base-branch: @@ -18,21 +18,6 @@ inputs: description: 'Upload SARIF to GitHub Code Scanning (default: false)' required: false default: 'false' - infisical-identity-id: - description: 'Infisical OIDC identity ID (from secret INFISICAL_IDENTITY_ID)' - required: true - infisical-project: - description: 'Infisical project slug' - required: false - default: 'github-actions' - infisical-env: - description: 'Infisical environment slug' - required: false - default: 'prod' - infisical-domain: - description: 'Infisical domain URL' - required: false - default: 'https://infisical.ajianaz.dev' github-token: description: 'GitHub token for PR comments and SARIF upload' required: true @@ -40,31 +25,6 @@ inputs: runs: using: 'composite' steps: - - name: Fetch LLM secrets from Infisical (with fallback to org secrets) - id: infisical - continue-on-error: true - uses: Infisical/secrets-action@8a06c1bdcd5b8635d510c52d4b57a92c1ccef785 # v1.0.9 - with: - method: 'oidc' - identity-id: ${{ inputs.infisical-identity-id }} - project-slug: ${{ inputs.infisical-project }} - env-slug: ${{ inputs.infisical-env }} - domain: ${{ inputs.infisical-domain }} - - - name: Fallback to org secrets if Infisical failed - shell: bash - env: - CORA_API_KEY_FALLBACK: ${{ secrets.CORA_API_KEY }} - CORA_BASE_URL_FALLBACK: ${{ secrets.CORA_BASE_URL }} - CORA_MODEL_FALLBACK: ${{ secrets.CORA_MODEL }} - run: | - if [ "${{ steps.infisical.outcome }}" != "success" ]; then - echo "::warning::Infisical OIDC failed, falling back to org secrets" - echo "CORA_API_KEY=$CORA_API_KEY_FALLBACK" >> $GITHUB_ENV - echo "CORA_BASE_URL=$CORA_BASE_URL_FALLBACK" >> $GITHUB_ENV - echo "CORA_MODEL=$CORA_MODEL_FALLBACK" >> $GITHUB_ENV - fi - - name: Resolve cora-cli version id: resolve shell: bash @@ -134,9 +94,9 @@ runs: id: review shell: bash env: - CORA_API_KEY: ${{ env.CORA_API_KEY }} - CORA_BASE_URL: ${{ env.CORA_BASE_URL }} - CORA_MODEL: ${{ env.CORA_MODEL }} + CORA_API_KEY: ${{ secrets.CORA_API_KEY }} + CORA_BASE_URL: ${{ secrets.CORA_BASE_URL }} + CORA_MODEL: ${{ secrets.CORA_MODEL }} INPUT_BASE: ${{ inputs.base-branch }} INPUT_SEVERITY: ${{ inputs.severity }} run: | diff --git a/.github/workflows/cora-review.yml b/.github/workflows/cora-review.yml index 141a2fea..6db08d98 100644 --- a/.github/workflows/cora-review.yml +++ b/.github/workflows/cora-review.yml @@ -31,4 +31,3 @@ jobs: uses: ./.github/actions/cora-review with: github-token: ${{ secrets.GITHUB_TOKEN }} - infisical-identity-id: ${{ secrets.INFISICAL_IDENTITY_ID }} diff --git a/.github/workflows/deploy-website.yml b/.github/workflows/deploy-website.yml index dac3f7f9..a871146e 100644 --- a/.github/workflows/deploy-website.yml +++ b/.github/workflows/deploy-website.yml @@ -46,19 +46,10 @@ jobs: exit 1 fi - - name: Fetch secrets from Infisical - uses: Infisical/secrets-action@v1.0.9 - with: - method: "oidc" - identity-id: "${{ secrets.INFISICAL_IDENTITY_ID }}" - project-slug: "github-actions" - env-slug: "prod" - domain: "https://infisical.ajianaz.dev" - - name: Deploy to Cloudflare Pages uses: cloudflare/wrangler-action@v3 with: - apiToken: ${{ env.CLOUDFLARE_API_TOKEN }} - accountId: ${{ env.CLOUDFLARE_ACCOUNT_ID }} + apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} + accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} preCommands: npx wrangler pages project create cora --production-branch=develop || true command: pages deploy website/build/ --project-name=cora --commit-dirty=true --branch=develop diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5a2f470f..3ec9d555 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -94,17 +94,8 @@ jobs: - uses: dtolnay/rust-toolchain@stable - - name: Fetch CARGO_REGISTRY_TOKEN from Infisical - uses: Infisical/secrets-action@v1.0.9 - with: - method: "oidc" - identity-id: "${{ secrets.INFISICAL_IDENTITY_ID }}" - project-slug: "github-actions" - env-slug: "prod" - domain: "https://infisical.ajianaz.dev" - - name: Publish to crates.io - run: cargo publish --token ${{ env.CARGO_REGISTRY_TOKEN }} --allow-dirty + run: cargo publish --token ${{ secrets.CARGO_REGISTRY_TOKEN }} --allow-dirty release: name: Create GitHub Release From 86fa9846f619d6a8de129276b711b348fcd883c8 Mon Sep 17 00:00:00 2001 From: CTO Hermes Date: Tue, 2 Jun 2026 14:25:38 +0700 Subject: [PATCH 4/4] fix: pass org secrets as inputs to composite action Composite actions cannot access secrets.* context. Pass CORA_API_KEY, CORA_BASE_URL, CORA_MODEL as inputs from workflow caller (which can access secrets.*). --- .github/actions/cora-review/action.yml | 17 +++++++++++++---- .github/workflows/cora-review.yml | 3 +++ 2 files changed, 16 insertions(+), 4 deletions(-) diff --git a/.github/actions/cora-review/action.yml b/.github/actions/cora-review/action.yml index bd05201b..22e56a54 100644 --- a/.github/actions/cora-review/action.yml +++ b/.github/actions/cora-review/action.yml @@ -1,5 +1,5 @@ name: 'Cora AI Code Review' -description: 'Run cora AI code review on a PR diff. Uses org secrets (CORA_API_KEY, CORA_BASE_URL, CORA_MODEL). Posts PR comment with findings.' +description: 'Run cora AI code review on a PR diff. Posts PR comment with findings.' inputs: base-branch: @@ -18,6 +18,15 @@ inputs: description: 'Upload SARIF to GitHub Code Scanning (default: false)' required: false default: 'false' + cora-api-key: + description: 'LLM API key' + required: true + cora-base-url: + description: 'LLM API base URL' + required: false + cora-model: + description: 'LLM model ID' + required: false github-token: description: 'GitHub token for PR comments and SARIF upload' required: true @@ -94,9 +103,9 @@ runs: id: review shell: bash env: - CORA_API_KEY: ${{ secrets.CORA_API_KEY }} - CORA_BASE_URL: ${{ secrets.CORA_BASE_URL }} - CORA_MODEL: ${{ secrets.CORA_MODEL }} + CORA_API_KEY: ${{ inputs.cora-api-key }} + CORA_BASE_URL: ${{ inputs.cora-base-url }} + CORA_MODEL: ${{ inputs.cora-model }} INPUT_BASE: ${{ inputs.base-branch }} INPUT_SEVERITY: ${{ inputs.severity }} run: | diff --git a/.github/workflows/cora-review.yml b/.github/workflows/cora-review.yml index 6db08d98..ea67ea4d 100644 --- a/.github/workflows/cora-review.yml +++ b/.github/workflows/cora-review.yml @@ -31,3 +31,6 @@ jobs: uses: ./.github/actions/cora-review with: github-token: ${{ secrets.GITHUB_TOKEN }} + cora-api-key: ${{ secrets.CORA_API_KEY }} + cora-base-url: ${{ secrets.CORA_BASE_URL }} + cora-model: ${{ secrets.CORA_MODEL }}