Files
Codewhale/.github/workflows/sync-gitcode.yml
T
CodeWhale BotandClaude Opus 5.5 028fa0b1c2 ci(mirror): keep the GitCode mirror current alongside CNB
The founder wants https://gitcode.com/HunterBown/Codewhale kept up to
date; it had not been synced since 2026-09-18 (3,158 commits behind main).

- scripts/release/mirror-push.sh is the retrying push both mirrors use.
  It replaces the push_with_retry function that lived inline in
  sync-cnb.yml; CNB behaviour is unchanged.
- sync-gitcode.yml pushes main to GitCode on every main push once the
  repository variable GITCODE_MIRROR is "enabled" and the GITCODE_TOKEN
  secret is set. Until then main pushes skip the job instead of failing.
  A manual dispatch from main pushes main and every v* tag, for the
  catch-up. Tags are never force-rewritten, matching the CNB rule.
- release.yml calls it for each release tag (tags pushed with
  GITHUB_TOKEN start no workflows), behind the same variable.
- GITCODE_USERNAME / GITCODE_REPOSITORY variables default to
  HunterBown and HunterBown/Codewhale.

Evidence:
- actionlint .github/workflows/{sync-gitcode,sync-cnb,release}.yml: exit 0.
- shellcheck scripts/release/mirror-push.sh: exit 0.
- node .github/scripts/release-workflows.test.js: exit 0 (its CNB tag
  assertion now looks for the shared script call).
- Local smoke against a scratch bare repo: main and a v* tag pushed;
  a missing remote retried 3 times and exited with the error line.
- Not verified: a real push to GitCode (needs the founder's GitCode
  token as a GitHub secret) and the GitCode HTTPS username format.

The CHANGELOG line follows in the 0.10.2 changelog consolidation commit.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-21 02:38:55 -07:00

75 lines
2.8 KiB
YAML

name: Sync to GitCode
on:
push:
branches: [main]
workflow_dispatch: {}
workflow_call:
inputs:
release_tag:
required: true
type: string
source_sha:
required: true
type: string
secrets:
GITCODE_TOKEN:
required: true
concurrency:
group: gitcode-sync-${{ github.ref }}
cancel-in-progress: false
permissions:
contents: read
jobs:
sync:
if: github.repository_owner == 'codewhale-hq' && (github.event_name != 'push' || vars.GITCODE_MIRROR == 'enabled')
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
with:
fetch-depth: 0
ref: ${{ inputs.source_sha || github.sha }}
- name: Push to GitCode
env:
GITCODE_TOKEN: ${{ secrets.GITCODE_TOKEN }}
GITCODE_USER: ${{ vars.GITCODE_USERNAME || 'HunterBown' }}
GITCODE_REPO: ${{ vars.GITCODE_REPOSITORY || 'HunterBown/Codewhale' }}
RELEASE_TAG: ${{ inputs.release_tag }}
SOURCE_SHA: ${{ inputs.source_sha || github.sha }}
shell: bash
run: |
set -euo pipefail
if [ -z "${GITCODE_TOKEN:-}" ]; then
echo "::error::GITCODE_TOKEN secret is not set; cannot push to GitCode." >&2
exit 1
fi
ENCODED_USER="$(printf '%s' "${GITCODE_USER}" | python3 -c 'import sys, urllib.parse; print(urllib.parse.quote(sys.stdin.read(), safe=""))')"
ENCODED_TOKEN="$(printf '%s' "${GITCODE_TOKEN}" | python3 -c 'import sys, urllib.parse; print(urllib.parse.quote(sys.stdin.read(), safe=""))')"
git remote add gitcode "https://${ENCODED_USER}:${ENCODED_TOKEN}@gitcode.com/${GITCODE_REPO}.git"
if [[ -n "${RELEASE_TAG}" ]]; then
if ! [[ "${RELEASE_TAG}" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]] ||
[[ "$(git rev-parse 'HEAD^{commit}')" != "${SOURCE_SHA}" ]]; then
echo "::error::GitCode release source does not match the frozen tag input." >&2
exit 1
fi
./scripts/release/verify-remote-tag.sh \
"https://github.com/${GITHUB_REPOSITORY}.git" "${RELEASE_TAG}" "${SOURCE_SHA}"
scripts/release/mirror-push.sh gitcode "tag ${RELEASE_TAG}" "refs/tags/${RELEASE_TAG}:refs/tags/${RELEASE_TAG}"
elif [[ "${GITHUB_REF}" != refs/heads/main ]]; then
echo "::error::GitCode mirrors main only; dispatch this workflow from main." >&2
exit 1
elif [[ "${GITHUB_EVENT_NAME}" == workflow_dispatch ]]; then
scripts/release/mirror-push.sh gitcode "main" HEAD:refs/heads/main --force
scripts/release/mirror-push.sh gitcode "release tags" "refs/tags/v*:refs/tags/v*"
else
scripts/release/mirror-push.sh gitcode "main" HEAD:refs/heads/main --force
fi