qwen-code/.github
qqqys a68b2e1e7b
ci: publish autofix PRs as qwen-code-ci-bot (#5137)
The scheduled issue autofix workflow's Publish PR step fell back to the
default GITHUB_TOKEN because AUTOFIX_BOT_TOKEN was never configured.
GitHub blocks GITHUB_TOKEN from opening pull requests ("GitHub Actions
is not permitted to create or approve pull requests"), so the run failed
at the final step even though a fix had already been verified and the
branch pushed.

Use the qwen-code-ci-bot PAT (QWEN_CODE_BOT_TOKEN, falling back to
CI_BOT_PAT — the same secrets the issue follow-up bot uses) so the PR is
opened by qwen-code-ci-bot. As a real-account token it bypasses the
restriction and also triggers CI on the created PR, which GITHUB_TOKEN
would not. Add a guard that fails with a clear message when neither
secret is configured.

Co-authored-by: Qwen-Coder <noreply@alibabacloud.com>
2026-06-16 07:41:10 +08:00
..
actions/post-coverage-comment chore(ci): Ensure action and community workflows are consistent and not vulnerable to injection attacks (#6107) 2025-08-13 02:36:37 +00:00
ISSUE_TEMPLATE chore: re-organize labels for better triage results (#819) 2025-10-17 19:49:11 +08:00
scripts Sync upstream Gemini-CLI v0.8.2 (#838) 2025-10-23 09:27:04 +08:00
workflows ci: publish autofix PRs as qwen-code-ci-bot (#5137) 2026-06-16 07:41:10 +08:00
dependabot.yml Limit dependabot PRs to security updates (#6657) 2025-08-20 22:24:43 +00:00
pull_request_template.md docs(agents,pr-template): add Working Principles and restructure PR template (#4496) 2026-05-25 19:15:35 +08:00
release.yml chore: add .github/release.yml to support skip-changelog label (#4327) 2026-05-20 22:30:52 +08:00