Merge pull request 'fix(ci): publish-workspace-server-image — remove mandatory AUTO_SYNC_TOKEN check (internal#561)' (#572) from fix/publish-workspace-server-image-optional-token into main
Block internal-flavored paths / Block forbidden paths (push) Successful in 14s
CI / Detect changes (push) Successful in 1m6s
Lint curl status-code capture / Scan workflows for curl status-capture pollution (push) Successful in 18s
Secret scan / Scan diff for credential-shaped strings (push) Successful in 17s
E2E API Smoke Test / detect-changes (push) Successful in 1m7s
publish-workspace-server-image / build-and-push (push) Failing after 50s
E2E Staging Canvas (Playwright) / detect-changes (push) Successful in 1m18s
Handlers Postgres Integration / detect-changes (push) Successful in 1m19s
Runtime PR-Built Compatibility / detect-changes (push) Successful in 1m17s
Continuous synthetic E2E (staging) / Synthetic E2E against staging (push) Has started running
CI / Platform (Go) (push) Successful in 9s
CI / Shellcheck (E2E scripts) (push) Successful in 7s
CI / Canvas (Next.js) (push) Successful in 10s
CI / Python Lint & Test (push) Successful in 10s
E2E API Smoke Test / E2E API Smoke Test (push) Successful in 10s
E2E Staging Canvas (Playwright) / Canvas tabs E2E (push) Successful in 13s
Handlers Postgres Integration / Handlers Postgres Integration (push) Successful in 11s
Runtime PR-Built Compatibility / PR-built wheel + import smoke (push) Successful in 11s
main-red-watchdog / watchdog (push) Successful in 1m14s
gate-check-v3 / gate-check (push) Failing after 19s
Staging SaaS smoke (every 30 min) / Staging SaaS smoke (push) Failing after 5m17s
CI / Canvas Deploy Reminder (push) Has been skipped
CI / all-required (push) Successful in 6s
Sweep stale e2e-* orgs (staging) / Sweep e2e orgs (push) Successful in 16s
Sweep stale Cloudflare DNS records / Sweep CF orphans (push) Failing after 24s

This commit was merged in pull request #572.
This commit is contained in:
2026-05-11 21:54:11 +00:00
@@ -92,10 +92,9 @@ jobs:
MOLECULE_GITEA_TOKEN: ${{ secrets.AUTO_SYNC_TOKEN }}
run: |
set -euo pipefail
if [ -z "${MOLECULE_GITEA_TOKEN}" ]; then
echo "::error::AUTO_SYNC_TOKEN secret is empty"
exit 1
fi
# clone-manifest.sh supports anonymous cloning for public repos (post-
# 2026-05-08 migration). The token is only needed for private repos.
# Do NOT require it — a missing secret would fail the build unnecessarily.
mkdir -p .tenant-bundle-deps
bash scripts/clone-manifest.sh \
manifest.json \