f472f2c6ec
All checks were successful
CodeAnt AI Review - Stage 1 / codeant-review (push) Successful in 1m3s
126 lines
4.7 KiB
YAML
126 lines
4.7 KiB
YAML
name: CodeAnt AI Review - Stage 1
|
|
|
|
on:
|
|
pull_request:
|
|
branches: ["main"]
|
|
push:
|
|
branches: ["main"]
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
codeant-review:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout Code
|
|
uses: actions/checkout@v3
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@v3
|
|
with:
|
|
node-version: "22"
|
|
|
|
- name: Install CodeAnt CLI
|
|
run: npm install -g codeant-cli
|
|
|
|
- name: Configure CodeAnt Auth
|
|
env:
|
|
CODEANT_API_TOKEN: ${{ secrets.CODEANT_API_TOKEN }}
|
|
run: |
|
|
if [ -z "${CODEANT_API_TOKEN}" ]; then
|
|
echo "ERROR: CODEANT_API_TOKEN secret is not set in repository settings."
|
|
echo "Go to: Settings → Secrets → Add Secret → Name: CODEANT_API_TOKEN"
|
|
exit 1
|
|
fi
|
|
mkdir -p $HOME/.codeant
|
|
printf '{"apiKey":"%s","baseUrl":"https://service.codeant.ai"}\n' "$CODEANT_API_TOKEN" > $HOME/.codeant/config.json
|
|
echo "Config written (key length: ${#CODEANT_API_TOKEN})"
|
|
|
|
- name: Verify CodeAnt connectivity
|
|
run: |
|
|
echo "Base URL: $(codeant get-base-url)"
|
|
echo "CLI version: $(codeant --version)"
|
|
|
|
echo "=== API connectivity test ==="
|
|
HTTP_CODE=$(curl -sS -D /tmp/api_headers.txt -o /tmp/api_response.txt -w "%{http_code}" \
|
|
-H "Authorization: Bearer ${CODEANT_API_KEY:-}" \
|
|
-H "Content-Type: application/json" \
|
|
https://service.codeant.ai/health 2>/dev/null || echo "CURL_FAILED")
|
|
echo "HTTP status: $HTTP_CODE"
|
|
echo "--- Response headers (first 20 lines) ---"
|
|
sed -n '1,20p' /tmp/api_headers.txt || true
|
|
echo "--- Response body (first 200 chars) ---"
|
|
head -c 200 /tmp/api_response.txt || true
|
|
echo
|
|
|
|
if [ "$HTTP_CODE" = "200" ]; then
|
|
echo "Connectivity OK and endpoint accepted request."
|
|
elif [ "$HTTP_CODE" = "401" ]; then
|
|
echo "Connectivity OK (service reachable), but endpoint returned 401 Unauthorized."
|
|
echo "This usually means token/auth format for this endpoint is not accepted."
|
|
elif [ "$HTTP_CODE" = "CURL_FAILED" ]; then
|
|
echo "Connectivity FAILED (curl could not reach service.codeant.ai)."
|
|
exit 1
|
|
else
|
|
echo "Connectivity reached service but got unexpected status: $HTTP_CODE"
|
|
fi
|
|
env:
|
|
CODEANT_API_KEY: ${{ secrets.CODEANT_API_TOKEN }}
|
|
|
|
- name: Debug Commit Info
|
|
run: |
|
|
echo "==== EVENT CONTEXT ===="
|
|
echo "event_name=${GITHUB_EVENT_NAME}"
|
|
echo "base_ref=${GITHUB_BASE_REF}"
|
|
echo "ref_name=${GITHUB_REF_NAME}"
|
|
|
|
echo "==== LAST 3 COMMITS ===="
|
|
git log --oneline -n 3
|
|
|
|
echo "==== FILES IN LAST COMMIT ===="
|
|
git show --name-only --pretty="" HEAD
|
|
|
|
echo "==== IS MERGE COMMIT ===="
|
|
PARENTS=$(git log -1 --format="%P" HEAD | wc -w)
|
|
echo "Parent count: $PARENTS"
|
|
if [ "$PARENTS" -gt 1 ]; then
|
|
echo "HEAD is a merge commit"
|
|
git log --oneline HEAD~1..HEAD --first-parent || true
|
|
fi
|
|
|
|
- name: Run CodeAnt Review
|
|
run: |
|
|
REVIEW_EXCLUDES=".gitea/workflows/codeant.yml"
|
|
|
|
if [ "${GITHUB_EVENT_NAME}" = "pull_request" ] && [ -n "${GITHUB_BASE_REF}" ]; then
|
|
echo "Running PR review against base branch: ${GITHUB_BASE_REF}"
|
|
for attempt in 1 2 3; do
|
|
echo "PR review attempt $attempt/3"
|
|
codeant review --base "${GITHUB_BASE_REF}" --exclude "${REVIEW_EXCLUDES}" 2>&1 | tee review.txt || true
|
|
if ! grep -q "Unexpected token '<'" review.txt; then
|
|
break
|
|
fi
|
|
sleep $((attempt * 15))
|
|
done
|
|
else
|
|
# For push to main: check if HEAD is a merge commit
|
|
PARENTS=$(git log -1 --format="%P" HEAD | wc -w)
|
|
if [ "$PARENTS" -gt 1 ]; then
|
|
# Merge commits often include very large diffs and are already reviewed on pull_request.
|
|
echo "Merge commit detected on push; skipping review here."
|
|
echo "PR workflow run is the source of truth for full review." | tee review.txt
|
|
else
|
|
echo "Regular push - reviewing last commit"
|
|
for attempt in 1 2 3; do
|
|
echo "Push review attempt $attempt/3"
|
|
codeant review --last-commit --exclude "${REVIEW_EXCLUDES}" 2>&1 | tee review.txt || true
|
|
if ! grep -q "Unexpected token '<'" review.txt; then
|
|
break
|
|
fi
|
|
sleep $((attempt * 15))
|
|
done
|
|
fi
|
|
fi
|