What changed, and why it matters
This commit changes a CI test script so that GitHub Actions can write step summary reports to the correct file path inside a Docker container. It is a build/test infrastructure fix with no apparent security relevance.
No security action needed; this is a routine CI maintenance change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch updates .github/scripts/run-tests.sh to pass extra Docker environment variables and a volume mount only when running under GitHub Actions with GITHUB_STEP_SUMMARY set. This lets test tooling write GitHub step summary markdown to the expected container path. There are no product code changes, no privilege changes, no secrets handling, and no user-facing behavior changes.
Changed components
.github/scripts/run-tests.shInspect captured patch +15 / −1
### .github/scripts/run-tests.sh
@@ -22,4 +22,18 @@ until [ "$n" -ge 10 ]; do
done
compose -f "docker-compose.altcoins.yml" build
-compose -f "docker-compose.altcoins.yml" run -e "TEST_FILTERS=$1" -e "GITHUB_ACTIONS=${GITHUB_ACTIONS:-false}" tests
+
+test_container_args=(
+ -e "TEST_FILTERS=$1"
+ -e "GITHUB_ACTIONS=${GITHUB_ACTIONS:-false}"
+)
+
+if [ "${GITHUB_ACTIONS:-false}" = "true" ] && [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
+ test_container_args+=(
+ -e "GITHUB_STEP_SUMMARY=/tmp/github-step-summary"
+ -e "GITHUB_WORKSPACE=/source"
+ -v "${GITHUB_STEP_SUMMARY}:/tmp/github-step-summary"
+ )
+fi
+
+compose -f "docker-compose.altcoins.yml" run "${test_container_args[@]}" testsWhy this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.