Skip to content

fix: normalize release workflow identity - #286

Merged
Ishaan Gangwani (ishaan1124) merged 1 commit into
mainfrom
codex/release-identity-guard
Aug 14, 2026
Merged

fix: normalize release workflow identity#286
Ishaan Gangwani (ishaan1124) merged 1 commit into
mainfrom
codex/release-identity-guard

Conversation

@ishaan1124

Copy link
Copy Markdown
Member

Summary

  • normalize GitHub repository identity before main-only release checks
  • keep exact refs/heads/main enforcement for test and production publishing
  • add a static contract test covering both workflow guards

Root cause

GitHub supplied GITHUB_REPOSITORY=synthetic-sciences/openscience, while the new bash guards compared case-sensitively to synthetic-sciences/OpenScience. Test-publish run 31784085589 therefore failed in test-source before any build or publish.

Validation

  • bun test test/installation/release-order.test.ts
  • bun run typecheck
  • actionlint .github/workflows/npm-test.yml .github/workflows/publish.yml
  • Prettier check
  • git diff --check

@vercel

vercel Bot commented Aug 14, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
openscience Ready Ready Preview Aug 14, 2026 8:35am

Request Review

@ishaan1124
Ishaan Gangwani (ishaan1124) merged commit 2d6ef63 into main Aug 14, 2026
17 checks passed
@ishaan1124
Ishaan Gangwani (ishaan1124) deleted the codex/release-identity-guard branch August 14, 2026 08:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant