Skip to content

ci: fix main workflow when building non-main branches#693

Merged
gilescope merged 10 commits into
mainfrom
ozgb-main-workflow-fix
Feb 22, 2026
Merged

ci: fix main workflow when building non-main branches#693
gilescope merged 10 commits into
mainfrom
ozgb-main-workflow-fix

Conversation

@ozgb

@ozgb ozgb commented Feb 17, 2026

Copy link
Copy Markdown
Contributor

Overview

  • Ensures that all script references use the same ref. that the workflow is running from
  • Mirror ghcr.io/midnight-ntwrk to ghcr.io/midnightntwrk if missing
    • Earthly on old branches doesn't push to midnightnwrk

🗹 TODO before merging

📌 Submission Checklist

  • Changes are backward-compatible (or flagged if breaking)
  • Pull request description explains why the change is needed
  • Self-reviewed the diff
  • I have included a change file, or skipped for this reason:
  • If the changes introduce a new feature, I have bumped the node minor version
  • Update documentation (if relevant)
  • Updated AGENTS.md if build commands, architecture, or workflows changed
  • No new todos introduced

🧪 Testing Evidence

Please describe any additional testing aside from CI:

  • Additional tests are provided (if possible)

🔱 Fork Strategy

  • Node Runtime Update
  • Node Client Update
  • Other:
  • N/A

Links

ozgb added 4 commits February 16, 2026 15:52
Ensure sign-image.sh and free-disk-space.sh are checked out from
$GITHUB_REF (the workflow commit) rather than the inputs.branch ref,
so CI infrastructure always comes from the workflow version even when
building a different branch.
GITHUB_REF doesn't exist as a local ref when actions/checkout checked
out a different branch via inputs.branch. Fetch it from origin first,
then checkout files from FETCH_HEAD.
@ozgb ozgb requested a review from a team as a code owner February 17, 2026 12:16
@github-actions

github-actions Bot commented Feb 17, 2026

Copy link
Copy Markdown
Contributor

kics-logo

KICS version: v2.1.16

Category Results
CRITICAL CRITICAL 0
HIGH HIGH 0
MEDIUM MEDIUM 96
LOW LOW 12
INFO INFO 83
TRACE TRACE 0
TOTAL TOTAL 191
Metric Values
Files scanned placeholder 31
Files parsed placeholder 31
Files failed to scan placeholder 0
Total executed queries placeholder 73
Queries failed to execute placeholder 0
Execution time placeholder 9

@ozgb ozgb marked this pull request as draft February 17, 2026 12:28
ozgb added 3 commits February 17, 2026 13:41
Remove the existence check so images are always re-pushed with proper
single-arch manifests, overwriting any broken manifest lists from
previous imagetools create runs.
Re-add existence check before mirroring. The previous broken manifest
lists were caused by using imagetools create, which has been replaced
with pull+tag+push to preserve proper single-arch manifests.
@ozgb ozgb marked this pull request as ready for review February 17, 2026 14:38

@gilescope gilescope left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agreed, sbom for indexer seems the wrong place for it.
We should delete it rather than commenting it out.

@gilescope gilescope added this pull request to the merge queue Feb 22, 2026
Merged via the queue into main with commit df023e4 Feb 22, 2026
213 of 226 checks passed
@gilescope gilescope deleted the ozgb-main-workflow-fix branch February 22, 2026 15:17
m2ux added a commit that referenced this pull request Apr 23, 2026
Signed-off-by: Mike Clay <mike.clay@shielded.io>
m2ux added a commit that referenced this pull request Apr 23, 2026
Signed-off-by: Mike Clay <mike.clay@shielded.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants