review-bot

You've already forked review-bot

Code Issues Pull Requests Actions Packages Projects Releases 6 Wiki Activity

Compare commits

base: rodin/review-bot:review-bot-issue-120

rodin/review-bot:v0.4.0 rodin/review-bot:v0.3.2 rodin/review-bot:v0.3.1 rodin/review-bot:v0.3.0 rodin/review-bot:v0.2.0 rodin/review-bot:v0.1.0

...

compare: rodin/review-bot:50facefdd6971181dab1076d259bdb57021ffca8

Branches Tags

rodin/review-bot:v0.4.0 rodin/review-bot:v0.3.2 rodin/review-bot:v0.3.1 rodin/review-bot:v0.3.0 rodin/review-bot:v0.2.0 rodin/review-bot:v0.1.0

1 Commits

review-bot-issue-120 ... 50facefdd6

Author	SHA1	Message	Date
aweiker	50facefdd6	Merge PR #121 : fix(action): detect VCS host type for version resolution and binary download CI / test (push) Successful in 18s Details CI / review (anthropic--claude-4.6-sonnet, sonnet, SONNET_REVIEW_TOKEN) (push) Has been skipped Details CI / review (gpt-5, gpt, GPT_REVIEW_TOKEN) (push) Has been skipped Details CI / review (gpt-5, security, ., rodin/security-patterns, SECURITY_REVIEW.md, SECURITY_REVIEW_TOKEN) (push) Has been skipped Details This PR addresses issue #120 by adding GitHub/GHES support to the composite action. Key improvements: - Detects VCS host type via github.api_url presence (GitHub/GHES vs Gitea) - Uses correct API paths: /api/v3 for GitHub, /api/v1 for Gitea - Prevents token exfiltration by ignoring inputs.vcs-url on GitHub runners - Validates inputs (action-repo format, URL scheme, tokens) - Adds multi-arch support (uname-derived binary/OS detection) - Reuses computed values across steps via GITHUB_OUTPUT - Properly handles private release assets on GitHub via REST API - Backward compatible with existing Gitea workflows Reviewed and approved by sonnet-review, gpt-review, and security-review.	2026-05-14 07:28:43 +00:00

Author

SHA1

Message

Date

aweiker

50facefdd6

Merge PR #121 : fix(action): detect VCS host type for version resolution and binary download

CI / test (push) Successful in 18s

Details

CI / review (anthropic--claude-4.6-sonnet, sonnet, SONNET_REVIEW_TOKEN) (push) Has been skipped

Details

CI / review (gpt-5, gpt, GPT_REVIEW_TOKEN) (push) Has been skipped

Details

CI / review (gpt-5, security, ., rodin/security-patterns, SECURITY_REVIEW.md, SECURITY_REVIEW_TOKEN) (push) Has been skipped

Details

This PR addresses issue #120 by adding GitHub/GHES support to the composite
action. Key improvements:

- Detects VCS host type via github.api_url presence (GitHub/GHES vs Gitea)
- Uses correct API paths: /api/v3 for GitHub, /api/v1 for Gitea
- Prevents token exfiltration by ignoring inputs.vcs-url on GitHub runners
- Validates inputs (action-repo format, URL scheme, tokens)
- Adds multi-arch support (uname-derived binary/OS detection)
- Reuses computed values across steps via GITHUB_OUTPUT
- Properly handles private release assets on GitHub via REST API
- Backward compatible with existing Gitea workflows

Reviewed and approved by sonnet-review, gpt-review, and security-review.

2026-05-14 07:28:43 +00:00

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Expand all files Collapse all files

Compare commits

1 Commits review-bot-issue-120 ... 50facefdd6

Diff Content Not Available

1 Commits

review-bot-issue-120 ... 50facefdd6