Skip to content

fix(workflows): retry gitleaks download and test the install step - #9

Merged
itstimwhite merged 1 commit into
mainfrom
fix/secret-scan-install-retry
Oct 12, 2026
Merged

itstimwhite merged 1 commit into
mainfrom
fix/secret-scan-install-retry

Conversation

@itstimwhite

Copy link
Copy Markdown
Contributor
  • curl now retries the pinned gitleaks download (--retry 3 --retry-all-errors). The first symphony-control run (JovieInc/symphony-control#16) failed on a transient GitHub releases HTTP 500.
  • Ports LogYourBody's fail-closed install tests: a failed download or failed checksum never extracts the archive or adds it to PATH, and scanner errors (exit 2) fail the gate. LogYourBody can then drop its inline-step test when it adopts this workflow (ci(security): run gitleaks through the shared JovieInc/ci secret scan LogYourBody#1351).

Local: 11/11 tests pass and actionlint is clean.

🤖 Generated with Claude Code

A transient GitHub releases 500 failed the first consumer run (symphony-control).
Tests now cover checksum and download fail-closed paths, ported from LogYourBody.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@tently-review

tently-review Bot commented Oct 12, 2026

Copy link
Copy Markdown

🛡️ Tently review

✅ No design-intent regressions or decision drift found.

Posted by Tently

@itstimwhite
itstimwhite merged commit 4410546 into main Oct 12, 2026
5 checks passed
@itstimwhite
itstimwhite deleted the fix/secret-scan-install-retry branch October 12, 2026 21:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant