Skip to content

fix(hybrid-gate): resolve the trailer tip on push events, not just pull_request #26

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
forkwright merged 1 commit into from
Jul 30, 2026
Merged

fix(hybrid-gate): resolve the trailer tip on push events, not just pull_request #26

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 10 additions & 2 deletions .github/workflows/hybrid-gate.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -235,9 +235,17 @@ jobs:
# WHY: head.sha reaches the script via env, not shell interpolation.
PR_HEAD_SHA: ${{ github.event.pull_request.head.sha }}
run: |
body=$(git log -1 --format="%b" "$PR_HEAD_SHA")
# WHY the fallback: github.event.pull_request.* is populated on
# pull_request events ONLY. On a push, PR_HEAD_SHA is empty and
# `git log -1 --format=%b ""` dies with exit 128, which crashes this
# step before it writes `found` and fails the whole gate — the same
# event-shape hazard the docs-only and ai-attribution steps above
# already guard with their own fallback chains. On a push, HEAD IS
# the tip, so #2399's tip-binding property is preserved either way.
tip="${PR_HEAD_SHA:-HEAD}"
body=$(git log -1 --format="%b" "$tip")
if echo "$body" | grep -q "^Gate-Passed:"; then
echo "Found gate attestation on PR tip: $(echo "$body" | grep '^Gate-Passed:' | head -1)"
echo "Found gate attestation on tip ($tip): $(echo "$body" | grep '^Gate-Passed:' | head -1)"
found=true
else
found=false
Expand Down