Ruview/.github/workflows
rUv 74233cfb23
fix(ci): use env scope for secrets in gating if: expressions (#431)
GitHub Actions does not allow `secrets.X` to appear directly in
step-level `if:` expressions — only `env.X` is valid in that context.
Both ci.yml and security-scan.yml had Slack-notify steps gated on
`secrets.SLACK_WEBHOOK_URL != ''`, which made the entire workflow
fail to parse. Result: every push to main produced a 0-second failure
with 0 jobs run, masquerading as a CI signal that wasn't actually
running CI.

Confirmed root cause via:
  gh api -X POST repos/.../actions/workflows/167079093/dispatches \
    -f ref=main
  → 422 Invalid Argument - failed to parse workflow:
    (Line: 315, Col: 11): Unrecognized named-value: 'secrets'

Fix: promote the secret to job-level `env:` so step-level `if:`
references `env.SLACK_WEBHOOK_URL`. The actual secret value still
flows through unchanged for the action's runtime use.

Same pattern applied to security-scan.yml line 406 (the existing
SECURITY_SLACK_WEBHOOK_URL gate).

After this lands, every push to main should produce real CI runs
that actually execute jobs and reflect repo health honestly. The
runs may still fail for *real* reasons (e.g., CI image dependencies,
test gaps), but they will fail visibly with logs instead of in 0s
with no jobs.
2026-04-25 23:06:27 -04:00
..
cd.yml security: Fix GitHub Actions shell injection vulnerability 2026-02-28 20:40:25 +01:00
ci.yml fix(ci): use env scope for secrets in gating if: expressions (#431) 2026-04-25 23:06:27 -04:00
desktop-release.yml chore(repo): rename rust-port/wifi-densepose-rs → v2/ (flatten to one level) (#427) 2026-04-25 21:28:13 -04:00
firmware-ci.yml Release v0.6.2-esp32: ADR-081 kernel + Timer Svc fix, 4MB CI variant 2026-04-20 10:59:05 -04:00
firmware-qemu.yml fix(firmware): fall detection, 4MB flash, QEMU CI (#263, #265) 2026-03-15 11:49:29 -04:00
security-scan.yml fix(ci): use env scope for secrets in gating if: expressions (#431) 2026-04-25 23:06:27 -04:00
update-submodules.yml chore: track upstream main branch for vendor submodules 2026-03-04 13:30:48 -05:00
verify-pipeline.yml feat: CI pipeline verification, 3D body model, auth fixes, requirements lock 2026-02-28 06:20:08 +00:00