fix: add detailed logging for cross-repo resolution in hash check

Copilot · pelikhan · web-flow · commit 813e540246d2 · 2026-04-01T03:10:49.000Z
Add GITHUB_WORKFLOW_REF, GITHUB_REPOSITORY, resolved source repo, and same-repo/cross-repo invocation logging consistent with resolve_host_repo.cjs. Also adds tests covering same-repo logging and the new log lines. Agent-Logs-Url: https://github.com/github/gh-aw/sessions/905801db-b0c1-482f-b2e9-8d176009b69a Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
diff --git a/actions/setup/js/check_workflow_timestamp_api.cjs b/actions/setup/js/check_workflow_timestamp_api.cjs
@@ -37,6 +37,7 @@ async function main() {
   // When running cross-repo via org rulesets, context.repo points to the target
   // repository, not the repository that defines the workflow files.
   const workflowEnvRef = process.env.GITHUB_WORKFLOW_REF || "";
+  const currentRepo = process.env.GITHUB_REPOSITORY || `${context.repo.owner}/${context.repo.repo}`;
   const repoMatch = workflowEnvRef.match(/^([^/]+)\/([^/]+)\//);
   const refMatch = workflowEnvRef.match(/@(.+)$/);
 
@@ -47,11 +48,15 @@ async function main() {
   // Use the workflow ref if parseable, otherwise fall back to context.sha
   const ref = refMatch ? refMatch[1] : context.sha;
 
-  // Log cross-repo detection for debugging
-  const currentRepo = process.env.GITHUB_REPOSITORY || `${context.repo.owner}/${context.repo.repo}`;
+  core.info(`GITHUB_WORKFLOW_REF: ${workflowEnvRef || "(not set)"}`);
+  core.info(`GITHUB_REPOSITORY: ${currentRepo}`);
+  core.info(`Resolved source repo: ${owner}/${repo} @ ${ref}`);
+
   const workflowRepo = `${owner}/${repo}`;
   if (workflowRepo !== currentRepo) {
     core.info(`Cross-repo invocation detected: workflow source is "${workflowRepo}", current repo is "${currentRepo}"`);
+  } else {
+    core.info(`Same-repo invocation: checking out ${workflowRepo} @ ${ref}`);
   }
 
   // Helper function to compute and compare frontmatter hashes
diff --git a/actions/setup/js/check_workflow_timestamp_api.test.cjs b/actions/setup/js/check_workflow_timestamp_api.test.cjs
@@ -105,6 +105,19 @@ engine: copilot
       expect(mockCore.setFailed).not.toHaveBeenCalled();
       expect(mockCore.summary.addRaw).not.toHaveBeenCalled();
     });
+
+    it("should log same-repo invocation when GITHUB_WORKFLOW_REF matches GITHUB_REPOSITORY", async () => {
+      process.env.GITHUB_WORKFLOW_REF = "test-owner/test-repo/.github/workflows/test.lock.yml@refs/heads/main";
+      process.env.GITHUB_REPOSITORY = "test-owner/test-repo";
+
+      mockGithub.rest.repos.getContent.mockResolvedValue({ data: null });
+
+      await main();
+
+      expect(mockCore.info).toHaveBeenCalledWith(expect.stringContaining("Same-repo invocation"));
+      expect(mockCore.info).toHaveBeenCalledWith(expect.stringContaining("GITHUB_WORKFLOW_REF:"));
+      expect(mockCore.info).toHaveBeenCalledWith(expect.stringContaining("Resolved source repo:"));
+    });
   });
 
   describe("when lock file is outdated (hashes differ)", () => {
@@ -520,6 +533,16 @@ engine: copilot
       expect(mockCore.setFailed).not.toHaveBeenCalled();
     });
 
+    it("should log GITHUB_WORKFLOW_REF, GITHUB_REPOSITORY, and resolved source repo", async () => {
+      mockGithub.rest.repos.getContent.mockResolvedValue({ data: null });
+
+      await main();
+
+      expect(mockCore.info).toHaveBeenCalledWith("GITHUB_WORKFLOW_REF: source-owner/source-repo/.github/workflows/test.lock.yml@refs/heads/main");
+      expect(mockCore.info).toHaveBeenCalledWith("GITHUB_REPOSITORY: target-owner/target-repo");
+      expect(mockCore.info).toHaveBeenCalledWith(expect.stringContaining("Resolved source repo: source-owner/source-repo @ refs/heads/main"));
+    });
+
     it("should use the workflow ref from GITHUB_WORKFLOW_REF, not context.sha", async () => {
       const validHash = "c2a79263dc72f28c76177afda9bf0935481b26da094407a50155a6e0244084e3";
       const lockFileContent = `# frontmatter-hash: ${validHash}
