fix(ci): install jq before sop-tier-check script runs #363

Closed
core-devops wants to merge 1 commits from fix/sop-tier-check-jq-install into staging

1 Commits

Author SHA1 Message Date
e6118b3a7f fix(ci): install jq before sop-tier-check script runs
Some checks failed
Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 12s
sop-tier-check / tier-check (pull_request) Failing after 11s
audit-force-merge / audit (pull_request) Has been skipped
Root cause: the sop-tier-check.sh script uses jq extensively for all
JSON API parsing (whoami, labels, team IDs, reviews). Gitea Actions
runners (ubuntu-latest label) do not bundle jq — script exits at
line 67 with "jq: command not found", producing "Failing after 1-3s"
status on every staging PR.

Symptom: all base=staging PRs failing sop-tier-check. Main-based PRs
inconsistent — #341 passed because it ran on a runner that happened to
have jq from a prior unrelated task. Secret-scan passes because it
uses pure bash/grep (no jq dependency).

Fix: add apt-get install -y jq step before the script run.
pull_request_target loads the workflow from the base branch, so the
fix only takes effect once this PR is merged.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-11 03:28:45 +00:00