fix(ci): publish-workspace-server-image — remove mandatory AUTO_SYNC_TOKEN check (internal#561) #572
Merged
infra-runtime-be
merged 3 commits from 2026-05-11 21:54:18 +00:00
fix/publish-workspace-server-image-optional-token into main
3 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
| 565898fe5a |
Merge branch 'main' into fix/publish-workspace-server-image-optional-token
All checks were successful
Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 15s
Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 26s
CI / Detect changes (pull_request) Successful in 1m14s
E2E API Smoke Test / detect-changes (pull_request) Successful in 1m12s
E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 50s
Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 17s
qa-review / approved (pull_request) Successful in 18s
gate-check-v3 / gate-check (pull_request) Successful in 29s
Handlers Postgres Integration / detect-changes (pull_request) Successful in 55s
Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 54s
security-review / approved (pull_request) Successful in 21s
sop-tier-check / tier-check (pull_request) Successful in 15s
audit-force-merge / audit (pull_request) Has been skipped
CI / Platform (Go) (pull_request) Successful in 10s
CI / Shellcheck (E2E scripts) (pull_request) Successful in 8s
CI / Canvas (Next.js) (pull_request) Successful in 12s
CI / Python Lint & Test (pull_request) Successful in 11s
E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 17s
E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 13s
Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 8s
Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 13s
CI / Canvas Deploy Reminder (pull_request) Has been skipped
CI / all-required (pull_request) Successful in 6s
|
|||
| 25ff821c4f |
Merge branch 'main' into fix/publish-workspace-server-image-optional-token
Some checks failed
Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 24s
CI / Detect changes (pull_request) Successful in 1m24s
E2E API Smoke Test / detect-changes (pull_request) Successful in 1m12s
E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 1m10s
Harness Replays / detect-changes (pull_request) Successful in 22s
Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 24s
Handlers Postgres Integration / detect-changes (pull_request) Successful in 1m19s
Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 22s
Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 59s
gate-check-v3 / gate-check (pull_request) Successful in 27s
qa-review / approved (pull_request) Failing after 20s
security-review / approved (pull_request) Failing after 21s
sop-tier-check / tier-check (pull_request) Successful in 24s
CI / Shellcheck (E2E scripts) (pull_request) Successful in 17s
CI / Platform (Go) (pull_request) Successful in 18s
CI / Python Lint & Test (pull_request) Successful in 13s
E2E API Smoke Test / E2E API Smoke Test (pull_request) Successful in 11s
Harness Replays / Harness Replays (pull_request) Successful in 7s
Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 7s
Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 7s
E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 9m4s
CI / Canvas (Next.js) (pull_request) Failing after 13m20s
CI / Canvas Deploy Reminder (pull_request) Has been skipped
CI / all-required (pull_request) Failing after 5s
|
|||
| c58aef31e7 |
fix(ci): publish-workspace-server-image — remove mandatory AUTO_SYNC_TOKEN check
Some checks failed
Block internal-flavored paths / Block forbidden paths (pull_request) Successful in 24s
CI / Detect changes (pull_request) Successful in 1m22s
Harness Replays / detect-changes (pull_request) Successful in 36s
E2E Staging Canvas (Playwright) / detect-changes (pull_request) Successful in 1m12s
E2E API Smoke Test / detect-changes (pull_request) Successful in 2m6s
Lint curl status-code capture / Scan workflows for curl status-capture pollution (pull_request) Successful in 1m19s
Handlers Postgres Integration / detect-changes (pull_request) Successful in 1m36s
gate-check-v3 / gate-check (pull_request) Successful in 53s
Runtime PR-Built Compatibility / detect-changes (pull_request) Successful in 1m15s
Secret scan / Scan diff for credential-shaped strings (pull_request) Successful in 53s
security-review / approved (pull_request) Failing after 17s
qa-review / approved (pull_request) Failing after 21s
sop-tier-check / tier-check (pull_request) Successful in 18s
CI / Canvas (Next.js) (pull_request) Successful in 12s
CI / Python Lint & Test (pull_request) Successful in 11s
CI / Shellcheck (E2E scripts) (pull_request) Successful in 11s
Harness Replays / Harness Replays (pull_request) Successful in 9s
E2E Staging Canvas (Playwright) / Canvas tabs E2E (pull_request) Successful in 12s
Runtime PR-Built Compatibility / PR-built wheel + import smoke (pull_request) Successful in 11s
CI / Canvas Deploy Reminder (pull_request) Has been skipped
Handlers Postgres Integration / Handlers Postgres Integration (pull_request) Successful in 5m41s
E2E API Smoke Test / E2E API Smoke Test (pull_request) Failing after 5m59s
CI / Platform (Go) (pull_request) Failing after 13m49s
CI / all-required (pull_request) Failing after 6s
The `Pre-clone manifest deps` step exits with error if AUTO_SYNC_TOKEN is not set. This was a safety belt added during initial development, but it is wrong: manifest.json explicitly records all listed repos as public on git.moleculesai.app (OSS surface contract). The token is only needed for private repos, which are handled at provision-time via the per-tenant credential resolver. Removing the hard exit lets the workflow succeed when: - AUTO_SYNC_TOKEN is absent (anonymous clone works for public repos) - AUTO_SYNC_TOKEN is set (authenticated clone still works) No functional change to the clone-manifest.sh call itself. Part of internal#327 / #561. |
