Files
time/.github/workflows/ci.yml
T
teahubxyzandclaude 8c6ad054b9 security: a real CI check before auto-merge; .github/ always protected (#46)
- checks(): the worker's own time/worker-run status can block or delay a merge but never counts as green
- dispatch_ci(): with no other check on the head, Time runs TIME_CI_WORKFLOW (ci.yml, workflow_dispatch) on the PR branch and waits; beat ci-dispatched, once
- ci.yml accepts workflow_dispatch
- touches_protected(): .github/ is always protected, whatever TIME_PROTECTED says
- labs-aicharts.yml: deploy URL via env, not ${{ }} in the script
- tests: worker-status-only no longer merges; dispatch once; real context merges


Claude-Session: https://claude.ai/code/session_01CYHXFvWMCs1GUmRmpySqQ6

Co-authored-by: claude <noreply@anthropic.com>
2026-10-13 21:33:35 -07:00

20 lines
566 B
YAML

name: ci
# Time's own tests. Also the check that lets Time auto-merge changes to itself.
on:
pull_request:
push:
branches: [main]
workflow_dispatch: # Time runs CI on a worker's PR branch by hand (pull_request skips token pushes)
permissions:
contents: read
jobs:
test:
runs-on: ubuntu-latest
timeout-minutes: 3
steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v4 # node 22+ has node:sqlite, which the passkey test runs on
with:
node-version: 22
- run: python3 .github/time/test_time.py