also looking at this
ci: dogfood the checked-out source, and smoke the PR's own CLI without secrets
#1445
2 files
+51
-9
| @@ -110,6 +110,37 @@ jobs: | ||
| 110 | 110 | - name: Check docs against source |
| 111 | 111 | run: bun run check:docs |
| 112 | 112 | |
| 113 | # Dogfood smoke: the PR's own code runs its own review, with a read-only | |
| 114 | # token and no API key. Catches a broken command surface before merge | |
| 115 | # without putting PR-modified code near secrets. | |
| 116 | buddy-smoke: | |
| 117 | if: github.event_name == 'pull_request' | |
| 118 | runs-on: ubuntu-latest | |
| 119 | permissions: | |
| 120 | contents: read | |
| 121 | ||
| 122 | steps: | |
| 123 | - uses: actions/checkout@v6 | |
| 124 | with: | |
| 125 | fetch-depth: 0 # the branch review diffs against origin/main | |
| 126 | ||
| 127 | - name: Install Bun | |
| 128 | uses: oven-sh/setup-bun@v2.2.0 | |
| 129 | ||
| 130 | - name: Use cached node_modules | |
| 131 | uses: actions/cache@v5.0.4 | |
| 132 | with: | |
| 133 | path: node_modules | |
| 134 | key: node-modules-${{ hashFiles('**/bun.lock') }} | |
| 135 | restore-keys: | | |
| 136 | node-modules- | |
| 137 | ||
| 138 | - name: Install Dependencies | |
| 139 | run: bun install | |
| 140 | ||
| 141 | - name: Review this branch with its own code | |
| 142 | run: bun ./bin/cli.ts review --branch --base origin/main --light --format github | |
| 143 | ||
| 113 | 144 | publish-commit: |
| 114 | 145 | needs: [lint, typecheck, test, check-docs] |
| 115 | 146 | runs-on: ubuntu-latest |