v30.3-roots.1 · Commit 8: [PATCH 08/68] ci: restore Roots assurance on Core 30.3 interfaces
ci/nightly-change-gate.py
Before: /dev/null · After: ci/nightly-change-gate.py
File metadata
new file mode 100755 index 0000000000000000000000000000000000000000..4f9b2e475f5573aa0c6e2342224366c65bc25f0e
Download original patch · Release notes
Diff rows 1–77 of 77. Line numbers refer to the original before/after files.
+ Added− RemovedUnmarked lines are context.
Scroll the code area horizontally to read long lines. Before is on the left; after is on the right. Unified view fits narrow screens more easily.
ci/nightly-change-gate.py
ADDED
|
@@ -0,0 +1,77 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
#!/usr/bin/env python3
|
| 2 |
+
# Copyright (c) 2026-present The Bitcoin Roots developers
|
| 3 |
+
# Distributed under the MIT software license, see the accompanying file COPYING.
|
| 4 |
+
"""Fail-open decision logic for the scheduled nightly workflow.
|
| 5 |
+
|
| 6 |
+
The workflow supplies the current scheduled run followed by its immediate
|
| 7 |
+
predecessor from GitHub's Actions API. A no-op is safe only after validating
|
| 8 |
+
that complete, ordered response and finding a successful predecessor at the
|
| 9 |
+
same commit.
|
| 10 |
+
"""
|
| 11 |
+
|
| 12 |
+
import argparse
|
| 13 |
+
import json
|
| 14 |
+
|
| 15 |
+
|
| 16 |
+
RUN = {"run": True, "reason": "uncertain-history"}
|
| 17 |
+
|
| 18 |
+
|
| 19 |
+
def should_run(event_name, current_run_id, current_sha, history):
|
| 20 |
+
"""Return a fail-open run decision for one Actions event."""
|
| 21 |
+
if event_name != "schedule":
|
| 22 |
+
return {"run": True, "reason": "non-scheduled-event"}
|
| 23 |
+
if not isinstance(current_run_id, int) or not isinstance(current_sha, str) or not current_sha:
|
| 24 |
+
return RUN
|
| 25 |
+
if not isinstance(history, dict) or history.get("complete") is not True:
|
| 26 |
+
return RUN
|
| 27 |
+
runs = history.get("workflow_runs")
|
| 28 |
+
# The API request deliberately asks for exactly two records. Any other
|
| 29 |
+
# cardinality is missing or truncated history, never a basis for skipping.
|
| 30 |
+
if not isinstance(runs, list) or len(runs) != 2:
|
| 31 |
+
return RUN
|
| 32 |
+
required = ("id", "event", "status", "conclusion", "head_sha")
|
| 33 |
+
if any(not isinstance(run, dict) or any(key not in run for key in required) for run in runs[:2]):
|
| 34 |
+
return RUN
|
| 35 |
+
current, previous = runs[:2]
|
| 36 |
+
if any(isinstance(run["id"], bool) or not isinstance(run["id"], int) or
|
| 37 |
+
not isinstance(run["event"], str) or not run["event"] or
|
| 38 |
+
not isinstance(run["status"], str) or not run["status"] or
|
| 39 |
+
not isinstance(run["head_sha"], str) or not run["head_sha"]
|
| 40 |
+
for run in (current, previous)):
|
| 41 |
+
return RUN
|
| 42 |
+
if (current["id"] != current_run_id or current["event"] != "schedule" or
|
| 43 |
+
current["head_sha"] != current_sha or current["status"] not in ("queued", "in_progress") or
|
| 44 |
+
current["conclusion"] is not None):
|
| 45 |
+
return RUN
|
| 46 |
+
if previous["id"] >= current["id"]:
|
| 47 |
+
return RUN
|
| 48 |
+
if (previous["event"] != "schedule" or previous["status"] != "completed" or
|
| 49 |
+
previous["conclusion"] != "success"):
|
| 50 |
+
return RUN
|
| 51 |
+
if previous["head_sha"] == current_sha:
|
| 52 |
+
return {"run": False, "reason": "unchanged-success"}
|
| 53 |
+
return {"run": True, "reason": "new-commit"}
|
| 54 |
+
|
| 55 |
+
|
| 56 |
+
def main():
|
| 57 |
+
parser = argparse.ArgumentParser(description=__doc__)
|
| 58 |
+
parser.add_argument("--event-name", required=True)
|
| 59 |
+
parser.add_argument("--current-run-id", type=int, required=True)
|
| 60 |
+
parser.add_argument("--current-sha", required=True)
|
| 61 |
+
parser.add_argument("--history-json", default='{"complete": false}')
|
| 62 |
+
parser.add_argument("--github-output")
|
| 63 |
+
args = parser.parse_args()
|
| 64 |
+
try:
|
| 65 |
+
history = json.loads(args.history_json)
|
| 66 |
+
except json.JSONDecodeError:
|
| 67 |
+
history = None
|
| 68 |
+
result = should_run(args.event_name, args.current_run_id, args.current_sha, history)
|
| 69 |
+
if args.github_output:
|
| 70 |
+
with open(args.github_output, "a", encoding="utf-8") as output:
|
| 71 |
+
output.write(f"run={'true' if result['run'] else 'false'}\n")
|
| 72 |
+
output.write(f"reason={result['reason']}\n")
|
| 73 |
+
print(json.dumps(result, sort_keys=True, separators=(",", ":")))
|
| 74 |
+
|
| 75 |
+
|
| 76 |
+
if __name__ == "__main__":
|
| 77 |
+
main()
|