fix(opencode): bind coverage artifacts to workflow attempts - #928
Draft
seonghobae wants to merge 7 commits into
Draft
fix(opencode): bind coverage artifacts to workflow attempts#928seonghobae wants to merge 7 commits into
seonghobae wants to merge 7 commits into
Conversation
📝 WalkthroughWalkthroughOpenCode 커버리지 source를 현재 workflow 시도와 불변 아티팩트 ID에 연결했습니다. 소비자는 다운로드 전에 실행 시도와 ID를 검증합니다. 계약 테스트, 품질 게이트, 운영 문서를 추가했습니다. ChangesOpenCode 커버리지 재실행
Estimated code review effort: 4 (Complex) | ~45 minutes Sequence Diagram(s)sequenceDiagram
participant Dispatch as repository_dispatch
participant Producer as coverage-source-tree
participant Storage as Actions artifact storage
participant Consumer as coverage-evidence
Dispatch->>Producer: 현재 workflow 시도 실행
Producer->>Storage: 시도별 coverage source 업로드
Producer-->>Consumer: artifact-id 및 run_attempt 전달
Consumer->>Consumer: 현재 시도와 ID 검증
Consumer->>Storage: 검증된 artifact-id로 다운로드
Consumer-->>Dispatch: 실패 시 전체 재실행 또는 새 dispatch 안내
Possibly related issues
Possibly related PRs
Suggested labels: Suggested reviewers: 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
seonghobae
marked this pull request as ready for review
August 11, 2026 02:15
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
🧹 Nitpick comments (1)
.github/workflows/opencode-coverage-artifact-rerun-quality-ci.yml (1)
41-44: 🔒 Security & Privacy | 🔵 Trivial | 💤 Low value
harden-runner모드를block으로 강화하는 것을 고려하십시오.이 단계는
egress-policy: audit를 사용합니다. 이 작업은 해시 고정된 의존성만 설치합니다.block모드와 명시적 허용 엔드포인트 목록을 사용하면 공급망 무결성을 더 강하게 보장합니다.이 제안은 선택 사항입니다. 즉시 수정할 필요는 없습니다.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In @.github/workflows/opencode-coverage-artifact-rerun-quality-ci.yml around lines 41 - 44, 선택적으로 Harden runner 단계의 egress-policy를 audit에서 block으로 변경하고, 해시 고정 의존성 설치에 필요한 엔드포인트만 명시적으로 허용하도록 설정하십시오.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In @.github/workflows/opencode-coverage-artifact-rerun-quality-ci.yml:
- Around line 41-44: 선택적으로 Harden runner 단계의 egress-policy를 audit에서 block으로
변경하고, 해시 고정 의존성 설치에 필요한 엔드포인트만 명시적으로 허용하도록 설정하십시오.
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro Plus
Run ID: f50d49be-4c63-4c3a-b297-d848e0b50bdd
📒 Files selected for processing (6)
.github/workflows/opencode-coverage-artifact-rerun-quality-ci.yml.github/workflows/opencode-review-dispatch.ymlCHANGELOG.mddocs/doctoring/opencode-coverage-artifact-reruns.mdscripts/ci/test_strix_quick_gate.shtests/test_opencode_coverage_artifact_rerun_contract.py
seonghobae
marked this pull request as draft
August 11, 2026 04:17
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Lineage and identities
This clean current-main successor supersedes #812, whose donor head
e5e4272701686cb11aecad3f879588cd98e71b6bdiverged 59 commits ahead / 31 behind and contained a historically truncated central workflow. The successor was rebuilt from independently resolved protectedmain6eb06cdd08c79a06f7b390069d4ffa49e2eb7dba; no checks, reviews, or approval claims from the donor transfer to this head.During connector publication, a size-capped local read initially truncated the central workflow in commit
308d2b8a79e1e5ba5531d4a776135fe616c76974. That defect was detected before PR creation or external consumption and repaired from GitHub's complete protected-main blob in44e3ecc66312e2c232b8f415322d09d84983aa1a. The current branch comparison is bounded to five intended files; the central workflow is +60/-4 with its target job and terminal scheduler sentinel intact.RED → GREEN evidence
5 passedintests/test_opencode_coverage_artifact_rerun_contract.py.982 passedplus16 subtests passed.6978/6978statements and2790/2790branches (100%).interrogate 100%.Acceptance
Keep Draft until the unchanged exact successor head has complete required CI/security/review evidence. Closing #811 requires protected-main merge and protected-main operational rerun evidence, not source-branch success alone.
Supersedes #812.
Summary by CodeRabbit
개선 사항
문서
테스트