ci: indirect the canonical-repo guard through vars.PULP_PRIMARY_REPO#6325
Merged
Conversation
32 workflows guard scheduled/owner-only jobs on `github.repository == 'danielraffel/pulp'`. That hardcoded owner string is the single biggest source of silent breakage if the repo ever transfers to an org: under a new owner every guard evaluates false and the job silently skips (no error) — watchdogs, reapers, coverage, release-cadence all go dark. Replace the literal with `github.repository == vars.PULP_PRIMARY_REPO`, backed by a repo variable `PULP_PRIMARY_REPO` currently set to `danielraffel/pulp`. This is a behaviour-preserving no-op today (the resolved value is byte-identical), and it turns a future owner change into flipping one variable instead of a 32-file hunt. Fork-safety is preserved: a fork lacks the variable, so the guard is still false on forks exactly as before. First step of the coordinate de-risk ahead of a possible org move; the CLI compile-time constant and a scripted inventory guard follow in companion changes. Config-Doc: skip reason="mechanical guard indirection; no CI/release behaviour or config surface changed" Skill-Update: skip skill=ci reason="no change to the ci skill's documented ship/validate workflow; guard expression only" Skill-Update: skip skill=intel-canary reason="mechanical guard indirection in nightly-intel.yml; the intel-canary skill's documented workflow is unchanged" Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017CdzQZrrtCETcDYH9MABhR
Ruleset drift reportChecked-in intent: No live ruleset with the expected name was found on this repo. Either the ruleset has not been created yet, or Required checks (merge-blocking)Checked in:
Live on GitHub: Missing on GitHub (declared in repo, not enforced live):
Advisory checks (visibility only, never required)
Drift detected. Update |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Coordinate de-risk, step 1 of N — ahead of a possible move to
Generous-Corp/pulp.32 workflows guard scheduled/owner-only jobs on the hardcoded literal
github.repository == 'danielraffel/pulp'. Under a new owner that evaluatesfalse and the job silently skips (no error) — every watchdog, reaper,
coverage, and release-cadence lane goes dark. This replaces the literal with
github.repository == vars.PULP_PRIMARY_REPO, backed by a repo variable set todanielraffel/pulptoday.Companion changes to follow: the CLI compile-time repo constant → a
-Ddefine,and a scripted inventory guard that fails CI if a new hardcoded
danielraffel/pulpguard creeps back in.
🤖 Generated with Claude Code
🔎 Provenance
claudem5~/Code/pulp3239e1c5-c3ff-434a-ac47-7db21d930bceResume
Jump to this tab
Relaunch (any agent)
Restore URL — https://claude.ai/code/session_017CdzQZrrtCETcDYH9MABhR
stamped 2026-07-19 06:06 UTC
Summary by cubic
Switch CI owner guards in 32 workflows to use
vars.PULP_PRIMARY_REPOinstead of the hardcodeddanielraffel/pulp, preventing scheduled/owner-only jobs from silently skipping after a repo transfer. No behavior change now.Refactors
github.repository == 'danielraffel/pulp'withgithub.repository == vars.PULP_PRIMARY_REPOacross all guarded jobs.danielraffel/pulp, so behavior is unchanged.Migration
PULP_PRIMARY_REPOto the newowner/repo. No other changes needed.Written for commit cada62e. Summary will update on new commits.