From a3ae8c8d1905527cc7f426c8f01f1e4647a1b31e Mon Sep 17 00:00:00 2001 From: Pigbibi <20649888+Pigbibi@users.noreply.github.com> Date: Sat, 11 Jul 2026 08:14:11 +0800 Subject: [PATCH 1/2] fix: pin drift snapshot checkout revision Co-Authored-By: Codex --- .github/workflows/reusable-drift-check.yml | 6 +++++- tests/test_reusable_drift_workflow.py | 2 ++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/reusable-drift-check.yml b/.github/workflows/reusable-drift-check.yml index de248b0..0c5bbae 100644 --- a/.github/workflows/reusable-drift-check.yml +++ b/.github/workflows/reusable-drift-check.yml @@ -12,6 +12,10 @@ on: snapshot_checkout_path: required: true type: string + snapshot_repository_ref: + required: false + type: string + default: "main" python_version: required: false type: string @@ -131,7 +135,7 @@ jobs: uses: actions/checkout@v6 with: repository: ${{ inputs.snapshot_repository }} - ref: main + ref: ${{ inputs.snapshot_repository_ref }} token: ${{ secrets.snapshot_repository_token || github.token }} path: ${{ inputs.snapshot_checkout_path }} diff --git a/tests/test_reusable_drift_workflow.py b/tests/test_reusable_drift_workflow.py index a5231ac..13095f7 100644 --- a/tests/test_reusable_drift_workflow.py +++ b/tests/test_reusable_drift_workflow.py @@ -14,6 +14,7 @@ def test_reusable_drift_workflow_enforces_lifecycle_preflight() -> None: assert "snapshot_repository:" in workflow assert "snapshot_repository_token:" in workflow assert "snapshot_checkout_path:" in workflow + assert "snapshot_repository_ref:" in workflow assert "ai_gateway_service_url:" in workflow assert "quant_platform_kit_ref:" in workflow assert "lifecycle_performance_bucket:" in workflow @@ -38,6 +39,7 @@ def test_reusable_drift_workflow_enforces_lifecycle_preflight() -> None: ) in workflow assert "quant-lifecycle drift --domain ${{ inputs.strategy_domain }} --no-alerts" in workflow assert 'repository: ${{ inputs.snapshot_repository }}' in workflow + assert 'ref: ${{ inputs.snapshot_repository_ref }}' in workflow assert 'path: ${{ inputs.snapshot_checkout_path }}' in workflow assert 'token: ${{ secrets.snapshot_repository_token || github.token }}' in workflow assert 'ref: ${{ inputs.quant_platform_kit_ref }}' in workflow From 4f4d0c1a6b9f445c73cf8de9d2f311968e69cc07 Mon Sep 17 00:00:00 2001 From: Pigbibi <20649888+Pigbibi@users.noreply.github.com> Date: Sat, 11 Jul 2026 08:28:00 +0800 Subject: [PATCH 2/2] ci: retrigger review with updated bridge Co-Authored-By: Codex