Skip to content

Tee the org-permissions diagnostic to the job log #177

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
eliorerz merged 1 commit into from
Aug 7, 2026
Merged

Tee the org-permissions diagnostic to the job log #177

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/apply.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -94,7 +94,7 @@ jobs:
echo
echo "### Runner-related"
jq -r '.[] | select(.description | test("runner"; "i")) | "- `\(.name)`: \(.description)"' /tmp/org-perms.json
} >> "$GITHUB_STEP_SUMMARY"
} | tee -a "$GITHUB_STEP_SUMMARY"

@coderabbitai coderabbitai Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🩺 Stability & Availability | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail
rg -n -C 4 '(^[[:space:]]*shell:|set -o pipefail|tee -a "\$GITHUB_STEP_SUMMARY")' .github/workflows/apply.yaml

Repository: osac-project/github-config

Length of output: 607

🏁 Script executed:

#!/bin/bash
set -euo pipefail
printf '%s\n' '--- workflow context ---'
sed -n '1,115p' .github/workflows/apply.yaml
printf '%s\n' '--- shell and pipefail references ---'
rg -n -C 3 '(^[[:space:]]*shell:|set([[:space:]]+-[a-zA-Z]*|[[:space:]]+)?[[:space:]]*[^#]*pipefail|tee -a "\$GITHUB_STEP_SUMMARY")' .github/workflows/apply.yaml

Repository: osac-project/github-config

Length of output: 6201

Enable pipefail for the summary pipeline.

This step uses the default bash -e shell, so a failed jq command can be masked by a successful tee. Add shell: bash or run set -o pipefail before the pipeline.

🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.github/workflows/apply.yaml at line 97, Update the workflow step containing
the jq-to-tee summary pipeline to enable Bash pipefail, either by declaring
shell: bash with pipefail enabled or by running set -o pipefail before the
pipeline, so jq failures propagate instead of being masked by tee.

- name: Setup OpenTofu
uses: opentofu/setup-opentofu@v2
with:
Expand Down
Loading