Admit named Forgejo PR merge checkouts in exec gate #1649

Closed
opened 2026-08-05 21:58:31 +00:00 by coilyco-ops · 0 comments
Member

AOS CI is failing in ward exec aos-test after the workflow attaches the pull-request merge checkout to a temporary ward-ci branch:

ward: refusing repo verb "repo.aos-test" - 1 commits behind origin/main
Repo verbs require a synced branch so the audit log can be reconstructed
from git history.

Ward already admits clean Forgejo Actions pull-request merge checkouts when Git reports detached HEAD, but runExecGate only enters that path for state.Branch == "HEAD". A clean PR merge checkout with complete Forgejo Actions metadata should be validated against the CI evidence even if the runner has attached a temporary branch name, so it does not race against origin/main moving during PR CI.

AOS CI is failing in `ward exec aos-test` after the workflow attaches the pull-request merge checkout to a temporary `ward-ci` branch: ``` ward: refusing repo verb "repo.aos-test" - 1 commits behind origin/main Repo verbs require a synced branch so the audit log can be reconstructed from git history. ``` Ward already admits clean Forgejo Actions pull-request merge checkouts when Git reports detached `HEAD`, but `runExecGate` only enters that path for `state.Branch == "HEAD"`. A clean PR merge checkout with complete Forgejo Actions metadata should be validated against the CI evidence even if the runner has attached a temporary branch name, so it does not race against `origin/main` moving during PR CI.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
coilyco-flight-deck/ward#1649
No description provided.