Skip to content

fix: skip gate for draft PRs (v2.2.0) #44

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rodchalski merged 3 commits into from
May 14, 2026
Merged

fix: skip gate for draft PRs (v2.2.0) #44

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
17367a1
docs: update install examples for v2
May 2, 2026
2f99567
fix: skip gate for draft PRs, bump to v2.2.0
May 14, 2026
0147563
Merge branch 'main' into pp-activation-hardening-20260502212104
rodchalski May 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 18 additions & 1 deletion action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# Version: v2.1.0
# Version: v2.2.0
name: 'Deploy Gate'
description: 'Block AI agents from production deploys without a human-signed Ed25519 receipt. Fails closed by default.'
author: 'Permission Protocol'
Expand Down Expand Up @@ -238,6 +238,23 @@ runs:
fi
done < <(normalize_csv_items "${PP_PRODUCTION_ENVIRONMENTS}")

# Skip the gate entirely for draft PRs — not ready for review/approval.
# When the PR is marked ready for review, the gate will run again.
if [ -n "${PP_PR_NUMBER}" ]; then
IS_DRAFT=$(gh pr view "${PP_PR_NUMBER}" --json isDraft --jq '.isDraft' 2>/dev/null || echo "false")
if [ "$IS_DRAFT" = "true" ]; then
echo "⏭️ Skipping Permission Protocol gate — PR #${PP_PR_NUMBER} is a draft"
set_output "approved" "true"
set_output "receipt-id" ""
set_output "decision" "DRAFT_SKIPPED"
set_output "error-code" ""
set_output "error-message" ""
set_output "request-id" ""
set_output "approval-url" ""
exit 0
fi
fi

echo "🔍 Collecting changed files for risk metadata..."
CHANGED_FILES=$(gh pr view "${PP_PR_NUMBER}" --json files --jq '.files[].path' 2>/dev/null || echo "")
if [ -z "$CHANGED_FILES" ]; then
Expand Down
Loading