ashwin/nxtgauge-ai-assistant
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(ci): compare staged vs HEAD when deciding to commit gitops update
All checks were successful
build-and-release / build (push) Successful in 8s
Details

Browse source 
git diff --quiet (no --cached) compares the working tree to the index,
not the index to HEAD. It ran right after git add, at which point the
working tree always matches the index - so it reported "no changes"
unconditionally, on every single run, regardless of whether the sed
substitution actually changed anything relative to HEAD. This silently
skipped the gitops commit+push every time (job still exited 0), which
is why the deployed digest never advanced across ~15 build runs.
Switched to git diff --cached --quiet, and added step-by-step echo
diagnostics so a future silent failure is visible in the run log
instead of just vanishing between two log lines.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
Ashwin Kumar Sivakumar 2026-07-17 04:59:56 +05:30
parent 37af327fa1
commit 23aca4ed65
1 changed files with 15 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
.forgejo/workflows/build.yaml
View file

@ -84,16 +84,21 @@ jobs:
DIGEST: ${{ env.IMAGE_DIGEST }} DIGEST: ${{ env.IMAGE_DIGEST }}
run: | run: |
set -euo pipefail set -euo pipefail
echo "[gitops] DIGEST=${DIGEST:-<empty>} SHA=${SHA:-<empty>}"
test -n "${DIGEST:-}"
apk add --no-cache git apk add --no-cache git
echo "[gitops] git installed: $(git --version)"
git config --global credential.helper '!f() { printf "%s\\n" "username=forgejo-actions"; printf "%s\\n" "password=$GITOPS_TOKEN"; }; f' git config --global credential.helper '!f() { printf "%s\\n" "username=forgejo-actions"; printf "%s\\n" "password=$GITOPS_TOKEN"; }; f'
GITOPS_DIR=$(mktemp -d) GITOPS_DIR=$(mktemp -d)
echo "[gitops] cloning into $GITOPS_DIR"
# -b main: this repo's server-side HEAD symref is broken (returns # -b main: this repo's server-side HEAD symref is broken (returns
# "remote HEAD refers to nonexistent ref" on a plain clone even # "remote HEAD refers to nonexistent ref" on a plain clone even
# though refs/heads/main exists) - an explicit branch bypasses # though refs/heads/main exists) - an explicit branch bypasses
# HEAD resolution entirely instead of relying on it. # HEAD resolution entirely instead of relying on it.
git clone -b main "$GITOPS_REPO" "$GITOPS_DIR" git clone -b main "$GITOPS_REPO" "$GITOPS_DIR"
echo "[gitops] clone done"
cd "$GITOPS_DIR" cd "$GITOPS_DIR"
# release-patch.yaml pins by digest (@sha256:...), not by mutable # release-patch.yaml pins by digest (@sha256:...), not by mutable
@ -103,8 +108,17 @@ jobs:
# clobbering this step's commits every ~2 minutes. The marker was # clobbering this step's commits every ~2 minutes. The marker was
# removed from the file so this CI step is now the sole writer. # removed from the file so this CI step is now the sole writer.
sed -i -E "s#image: ci\.nxtgauge\.com/ashwin/nxtgauge-ai-assistant(:[a-f0-9]+|@sha256:[a-f0-9]+)#image: ci.nxtgauge.com/ashwin/nxtgauge-ai-assistant@${DIGEST}#" apps/nxtgauge-ai-assistant/overlays/prod/release-patch.yaml sed -i -E "s#image: ci\.nxtgauge\.com/ashwin/nxtgauge-ai-assistant(:[a-f0-9]+|@sha256:[a-f0-9]+)#image: ci.nxtgauge.com/ashwin/nxtgauge-ai-assistant@${DIGEST}#" apps/nxtgauge-ai-assistant/overlays/prod/release-patch.yaml
echo "[gitops] after sed:"
cat apps/nxtgauge-ai-assistant/overlays/prod/release-patch.yaml
git config user.name "forgejo-actions[bot]" git config user.name "forgejo-actions[bot]"
git config user.email "forgejo-actions@ci.nxtgauge.com" git config user.email "forgejo-actions@ci.nxtgauge.com"
git add apps/nxtgauge-ai-assistant/overlays/prod/release-patch.yaml git add apps/nxtgauge-ai-assistant/overlays/prod/release-patch.yaml
git diff --quiet || (git commit -m "chore(gitops): deploy ai-assistant@${SHA} (${DIGEST})" && git push) if git diff --cached --quiet; then
echo "[gitops] no changes to commit"
else
echo "[gitops] committing and pushing"
git commit -m "chore(gitops): deploy ai-assistant@${SHA} (${DIGEST})"
git push
echo "[gitops] push exit code: $?"
fi