Skip to content

CI probe: PR head execution and branch-name handling - #2409

Closed
robertprast wants to merge 2 commits into
pixie-io:mainfrom
robertprast:ci/ref-sha-probe-$(echo${IFS}PIXIE_BRANCH_REF_PROBE)
Closed

robertprast wants to merge 2 commits into
pixie-io:mainfrom
robertprast:ci/ref-sha-probe-$(echo${IFS}PIXIE_BRANCH_REF_PROBE)

Conversation

@robertprast

@robertprast robertprast commented Oct 16, 2026 •

Copy link
Copy Markdown

Summary:
Temporary, harmless CI security probe. The branch name contains a command substitution that only prints PIXIE_BRANCH_REF_PROBE if a shell interprets it. The sole code change prints PIXIE_PR_HEAD_ACTION_EXECUTED from the PR-head bazelrc action. This PR is for testing and is not intended to merge. It does not print secrets or make network requests.

Relevant Issues:
N/A.

Type of change:
/kind cleanup

Test Plan and observed result:

  1. GitHub classified the PR author as NONE. The env-protect-setup job checked out base commit 8c2276ddad90db28de0da515d58831fe06896839, not the PR head.
  2. Its log shows env: pr-actions-approval and both ref and sha set to PR head commit 890d34b9442dac40470b6c9304ee5435d83a2b13. The branch-name substitution did not execute in that job.
  3. The authorize job is waiting for environment review, and no downstream job has run. No approval is requested for this probe.
  4. This draft is evidence for the gate behavior only. Do not approve or merge it; close it after review.

Changelog Message:
N/A; no user-facing change.

Additional documentation:
N/A.

@robertprast
robertprast marked this pull request as ready for review October 16, 2026 19:17
@robertprast
robertprast requested a review from a team as a code owner October 16, 2026 19:17
@robertprast
robertprast marked this pull request as draft October 16, 2026 19:18
@robertprast robertprast reopened this Oct 16, 2026
@robertprast
robertprast deleted the ci/ref-sha-probe-$(echo${IFS}PIXIE_BRANCH_REF_PROBE) branch October 16, 2026 21:32

This branch is waiting to be deployed

1 waiting deployment
pr-actions-approval — 8a4aa593 Waiting Oct 16, 2026 by robertprast via authorize #3136
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant