Skip to content
Merged
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 12 additions & 15 deletions .github/workflows/smoketest.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -14,14 +14,12 @@
statuses: read # Required for checking if all commit statuses are "success" in order to deploy the PR

jobs:
permission-check:
Linux:
runs-on: ubuntu-latest
environment: smoketest
if: github.event.issue.pull_request # Make sure the comment is on a PR
outputs:
allowed: ${{ steps.branch-deploy.outputs.continue }}
steps:
- name: branch-deploy
- name: Branch Deploy
id: branch-deploy
uses: github/branch-deploy@48285b12b35e47e2dde0c27d2abb33daa846d98b # v11.0.0
with:
Expand All @@ -31,54 +29,53 @@
stable_branch: "main"
update_branch: "disabled"

run-tests:
runs-on: ubuntu-latest
environment: smoketest
needs: permission-check
if: needs.permission-check.outputs.allowed == 'true'
steps:
- name: Setup Python
- if: steps.branch-deploy.outputs.continue == "true"
name: Setup Python
Comment thread Fixed
Comment thread
kevinbackhouse marked this conversation as resolved.
Outdated
uses: actions/setup-python@v5
with:
python-version: '3.11'

- name: Checkout the repo
- if: steps.branch-deploy.outputs.continue == "true"
name: Checkout the repo
Comment thread
kevinbackhouse marked this conversation as resolved.
Outdated
uses: actions/checkout@v5

- name: Checkout the PR
- if: steps.branch-deploy.outputs.continue == "true"
name: Checkout the PR
env:
PR_NUMBER: ${{ github.event.issue.number }}
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
gh pr checkout $PR_NUMBER

- name: Setup Python venv
- if: steps.branch-deploy.outputs.continue == "true"
name: Setup Python venv
Comment thread
kevinbackhouse marked this conversation as resolved.
Outdated
run: |
python -m venv .venv
source .venv/bin/activate
python -m pip install hatch

- name: Run tests
- if: steps.branch-deploy.outputs.continue == "true"
Comment thread Fixed
name: Run tests
Comment thread
kevinbackhouse marked this conversation as resolved.
Outdated
env:
AI_API_TOKEN: ${{ secrets.AI_API_TOKEN }}
GITHUB_AUTH_HEADER: "Bearer ${{ secrets.GITHUB_TOKEN }}"

run: |
source .venv/bin/activate
hatch build
hatch run main -p seclab_taskflow_agent.personalities.assistant 'explain modems to me please'
hatch run main -p seclab_taskflow_agent.personalities.c_auditer 'explain modems to me please'
hatch run main -p examples.personalities.echo 'explain modems to me please'
hatch run main -t examples.taskflows.CVE-2023-2283
hatch run main -t examples.taskflows.echo
hatch run main -t examples.taskflows.example
hatch run main -t examples.taskflows.example_globals
hatch run main -t examples.taskflows.example_inputs
hatch run main -t examples.taskflows.example_large_list_result_iter
hatch run main -t examples.taskflows.example_repeat_prompt
hatch run main -t examples.taskflows.example_repeat_prompt_async
hatch run main -t examples.taskflows.example_repeat_prompt_dictionary
hatch run main -t examples.taskflows.example_reusable_prompt
hatch run main -t examples.taskflows.example_reusable_taskflows
hatch run main -t examples.taskflows.example_triage_taskflow
hatch run main -t examples.taskflows.single_step_taskflow

Check failure

Code scanning / CodeQL

Untrusted Checkout TOCTOU Critical

Insufficient protection against execution of untrusted code on a privileged workflow (
issue_comment
).