mirrors/pikasTech-unidesk
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(agentrun): trust yaml source workspace for root git reads

Browse Source
This commit is contained in:
Codex
2026-06-27 16:30:44 +00:00
parent 46ef23f024
commit 33b85b73bc
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/src/agentrun/yaml-lane.ts
+3
View File
@@ -338,6 +338,7 @@ export function yamlLaneSourceStatusScript(spec: AgentRunLaneSpec): string {
"remote_branch_exists=false", "remote_branch_exists=false",
"remote_branch_commit=null", "remote_branch_commit=null",
"status_short=''", "status_short=''",
"git config --global --add safe.directory \"$expected_workspace\" 2>/dev/null || true",
"if [ -d .git ] || git rev-parse --show-toplevel >/dev/null 2>&1; then", "if [ -d .git ] || git rev-parse --show-toplevel >/dev/null 2>&1; then",
" actual_workspace=$(pwd)", " actual_workspace=$(pwd)",
" workspace_exists=true", " workspace_exists=true",
@@ -634,6 +635,7 @@ export function yamlLaneSourceRestoreScript(spec: AgentRunLaneSpec): string {
"tmp_dir=$(mktemp -d)", "tmp_dir=$(mktemp -d)",
"trap 'rm -rf \"$tmp_dir\"' EXIT", "trap 'rm -rf \"$tmp_dir\"' EXIT",
"workspace_exists=false", "workspace_exists=false",
"git config --global --add safe.directory \"$workspace\" 2>/dev/null || true",
"if git -C \"$workspace\" rev-parse --git-dir >/dev/null 2>&1; then workspace_exists=true; fi", "if git -C \"$workspace\" rev-parse --git-dir >/dev/null 2>&1; then workspace_exists=true; fi",
"if [ \"$workspace_exists\" != true ]; then", "if [ \"$workspace_exists\" != true ]; then",
" WORKSPACE=\"$workspace\" BRANCH=\"$branch\" node <<'NODE'", " WORKSPACE=\"$workspace\" BRANCH=\"$branch\" node <<'NODE'",
@@ -717,6 +719,7 @@ export function yamlLaneBuildImageSubmitScript(spec: AgentRunLaneSpec, sourceCom
`env_identity_files=${shQuote(JSON.stringify(build.envIdentityFiles))}`, `env_identity_files=${shQuote(JSON.stringify(build.envIdentityFiles))}`,
`build_args_json=${shQuote(JSON.stringify(buildArgs))}`, `build_args_json=${shQuote(JSON.stringify(buildArgs))}`,
"mkdir -p \"$state_dir\"", "mkdir -p \"$state_dir\"",
"git config --global --add safe.directory \"$workspace\" 2>/dev/null || true",
"cd \"$workspace\"", "cd \"$workspace\"",
"git checkout \"$source_commit\"", "git checkout \"$source_commit\"",
"env_identity=$(ENV_IDENTITY_FILES=\"$env_identity_files\" BUILD_ARGS_JSON=\"$build_args_json\" node <<'NODE'", "env_identity=$(ENV_IDENTITY_FILES=\"$env_identity_files\" BUILD_ARGS_JSON=\"$build_args_json\" node <<'NODE'",