Skip to content

[Amber] Fix: Bug: Loading custom workflow from private GitHub repo downloads no files#1015

Merged
jeremyeder merged 3 commits intomainfrom
amber/issue-1014-bug-loading-custom-workflow-from-private-github-re
Mar 25, 2026
Merged

[Amber] Fix: Bug: Loading custom workflow from private GitHub repo downloads no files#1015
jeremyeder merged 3 commits intomainfrom
amber/issue-1014-bug-loading-custom-workflow-from-private-github-re

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

Automated Fix by Amber Agent

This PR addresses issue #1014 using the Amber background agent.

Changes Summary

  • Action Type: auto-fix
  • Commit: c90c0f6
  • Triggered by: Issue label/command

Pre-merge Checklist

  • All linters pass
  • All tests pass
  • Changes follow project conventions (CLAUDE.md)
  • No scope creep beyond issue description

Reviewer Notes

This PR was automatically generated. Please review:

  1. Code quality and adherence to standards
  2. Test coverage for changes
  3. No unintended side effects

🤖 Generated with Amber Background Agent

Closes #1014

}

client := &http.Client{Timeout: 120 * time.Second}
resp, err := client.Do(httpReq)

Check failure

Code scanning / CodeQL

Uncontrolled data used in network request Critical

The
URL
of this request depends on a
user-provided value
.
The
URL
of this request depends on a
user-provided value
.
@ambient-code
Copy link
Copy Markdown
Contributor

ambient-code bot commented Mar 25, 2026

Review Queue Status

Check Status Detail
CI FAIL CodeQL
Conflicts pass ---
Reviews pass ---

Action needed: Fix failing CI checks: CodeQL

Auto-generated by Review Queue workflow. Updated when PR changes.

Amber Agent and others added 3 commits March 25, 2026 17:14
…epos

The SelectWorkflow handler only updated the CRD but never called the
runner's /workflow endpoint when the session was Running, so private
repos could not be cloned at runtime. Additionally, the runner's
/workflow endpoint did not accept auth token headers.

- backend: SelectWorkflow now calls the runner's /workflow endpoint
  (same pattern as AddRepo) with X-GitHub-Token/X-GitLab-Token when
  the session is in Running phase
- runner: change_workflow reads X-GitHub-Token/X-GitLab-Token headers
  and passes them to clone_workflow_at_runtime as overrides

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Add isValidKubernetesName check on sessionName parameter before it
reaches K8s API calls, addressing CodeQL uncontrolled-network-request
finding.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@jeremyeder jeremyeder force-pushed the amber/issue-1014-bug-loading-custom-workflow-from-private-github-re branch from 066df46 to 2e6c924 Compare March 25, 2026 21:15
@jeremyeder jeremyeder merged commit 02b2a7d into main Mar 25, 2026
32 checks passed
@jeremyeder jeremyeder deleted the amber/issue-1014-bug-loading-custom-workflow-from-private-github-re branch March 25, 2026 21:19
jeremyeder added a commit to jeremyeder/platform that referenced this pull request Mar 26, 2026
…wnloads no files (ambient-code#1015)

## Automated Fix by Amber Agent

This PR addresses issue ambient-code#1014 using the Amber background agent.

### Changes Summary
- **Action Type:** auto-fix
- **Commit:** c90c0f6
- **Triggered by:** Issue label/command

### Pre-merge Checklist
- [ ] All linters pass
- [ ] All tests pass
- [ ] Changes follow project conventions (CLAUDE.md)
- [ ] No scope creep beyond issue description

### Reviewer Notes
This PR was automatically generated. Please review:
1. Code quality and adherence to standards
2. Test coverage for changes
3. No unintended side effects

---
🤖 Generated with [Amber Background
Agent](https://github.com/ambient-code/platform/blob/main/docs/amber-automation.md)

Closes ambient-code#1014

---------

Co-authored-by: Amber Agent <amber@ambient-code.ai>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: Jeremy Eder <jeder@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

amber-generated PR created by Amber background agent auto-fix

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bug: Loading custom workflow from private GitHub repo downloads no files

1 participant