furyhawk/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-07-21 10:16:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(release): bind bootstrap publish workflow identity

Browse Source
This commit is contained in:
Peter Steinberger
2026-07-15 17:41:54 +01:00
parent e48427bfc8
commit 0f7fbfa003
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/plugin-clawhub-new.yml
+4
View File
@@ -823,6 +823,8 @@ jobs:
ARTIFACT_SIZE: ${{ needs.pack_bootstrap_plugins.outputs.artifact_size }}
GH_TOKEN: ${{ github.token }}
TARGET_SHA: ${{ needs.resolve_bootstrap_plan.outputs.ref_revision }}
WORKFLOW_HEAD_BRANCH: ${{ github.ref_name }}
WORKFLOW_REF: ${{ github.ref }}
WORKFLOW_SHA: ${{ github.sha }}
CLAWHUB_TOOLCHAIN_INTEGRITY: ${{ steps.clawhub_cli.outputs.integrity }}
CLAWHUB_TOOLCHAIN_SHA256: ${{ steps.clawhub_cli.outputs.lock_sha256 }}
@@ -844,6 +846,8 @@ jobs:
--run-attempt "${ARTIFACT_RUN_ATTEMPT}" \
--run-id "${ARTIFACT_RUN_ID}" \
--target-sha "${TARGET_SHA}" \
--workflow-head-branch "${WORKFLOW_HEAD_BRANCH}" \
--workflow-ref "${WORKFLOW_REF}" \
--workflow-sha "${WORKFLOW_SHA}"
- name: Rehash immutable ClawHub bootstrap artifacts
test/scripts/plugin-clawhub-new-workflow.test.ts
+2
View File
@@ -256,6 +256,8 @@ describe("Plugin ClawHub New workflow", () => {
expect(binding).toContain("--clawhub-toolchain-integrity");
expect(binding).toContain("--clawhub-toolchain-sha256");
expect(binding).toContain("--clawhub-toolchain-version");
expect(binding).toContain('--workflow-head-branch "${WORKFLOW_HEAD_BRANCH}"');
expect(binding).toContain('--workflow-ref "${WORKFLOW_REF}"');
});
it("rehashes and validates tgz identity before exposing the token", () => {