hermes-agent/tests/ci
ethernet 957ea640de
fix(ci): publish inline E2E evidence (#69699)
* fix(ci): publish inline E2E evidence

Upload bounded screenshot evidence from E2E, then publish validated images
from a trusted workflow_run job to commit-pinned branches in the evidence repo.

Wait briefly for the live CI review comment marker before publishing, so
GitHub's read-after-write delay cannot leave an orphaned evidence branch.

* fix(ci): isolate privileged credentials from PR jobs

Keep App private keys and Docker Hub credentials out of PR-controlled
workflows. Use protected environments for trusted publishing and a public
repository variable for the App client ID.

* fix(ci): attach E2E evidence with restricted bot session

Replace the App-backed evidence repository publisher with gh-image uploads
from a dedicated bot session in the gh-image environment.

* fix(ci): publish validated E2E evidence from forks

Let the trusted default-branch publisher handle bounded, validated evidence
artifacts from fork PR CI without checking out or executing fork code.
2026-07-23 02:15:23 +00:00
..
test_assemble_review_comment.py ci: surface E2E screenshots in review comment (#69631) 2026-07-22 23:19:53 +00:00
test_classify_changes.py ci: surface E2E screenshots in review comment (#69631) 2026-07-22 23:19:53 +00:00
test_e2e_screenshot_status.py ci: surface E2E screenshots in review comment (#69631) 2026-07-22 23:19:53 +00:00
test_emit_review_status.py ci: surface E2E screenshots in review comment (#69631) 2026-07-22 23:19:53 +00:00
test_live_comment.py ci: surface E2E screenshots in review comment (#69631) 2026-07-22 23:19:53 +00:00
test_lockfile_diff.py ci: live-updating PR review comment with structured job statuses 2026-07-20 16:48:25 -04:00
test_publish_e2e_evidence.py fix(ci): publish inline E2E evidence (#69699) 2026-07-23 02:15:23 +00:00
test_timings_report.py ci: surface E2E screenshots in review comment (#69631) 2026-07-22 23:19:53 +00:00