open-design/.github
lefarcen 80639d4da4
ci: make agent PR exploration trusted checkout lightweight (#3071)
The "Checkout trusted base scripts" step did a full actions/checkout of
this large repo on the self-hosted runner. On a recent run it stalled in
the initial `git fetch --depth=1 origin <sha>` for many minutes before
the agent script ever started, and the run had to be cancelled.

The trusted host side only needs the self-contained
`.github/scripts/agent-pr-explore-sandbox.sh`; PR code is checked out
inside Docker and PR context is gathered via the API. Replace the full
checkout with a single-file fetch via `gh api` (raw), pinned to the same
trusted base/dispatch commit, which avoids the git-protocol fetch of the
whole repo entirely.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-27 04:18:19 +00:00
..
actions fix(ci): narrow workflow scope and reuse setup steps (#2708) 2026-05-22 18:58:53 +08:00
ISSUE_TEMPLATE docs: point 0.8.0 preview contributors at main (#1846) 2026-05-15 22:37:04 +08:00
screenshots feat(ui): add copy to clipboard functionality for user messages with … (#1669) 2026-05-14 20:19:20 +08:00
scripts ci: map agent trace upload to existing R2 secrets (#3013) 2026-05-27 03:01:36 +00:00
workflows ci: make agent PR exploration trusted checkout lightweight (#3071) 2026-05-27 04:18:19 +00:00
actionlint.yaml Add sandboxed agent PR exploration (#2604) 2026-05-26 07:52:42 +00:00
pull_request_template.md docs(pr): require user-perspective description and surface area (#1520) 2026-05-13 15:28:05 +08:00