What the developer wrote
Authored by kdmukai
CI env var fix
What changed, and why it matters
This commit moves a GitHub Actions environment variable definition from inside a single test step to the top of the workflow file. It is a routine CI configuration cleanup with no apparent security relevance.
No security action required; this is a benign CI refactor.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change relocates PR_AUTHOR (used by a Version class to identify the current fork) from a shell export in the ‘Test with pytest’ step to a workflow-level env: block. This makes the variable available to all steps and is functionally equivalent for the test job. No secrets, permissions, inputs, or execution contexts were altered.
Changed components
.github/workflows/tests.ymlInspect captured patch +4 / −1
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index b4165fd..01411b0 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -13,6 +13,10 @@ concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
cancel-in-progress: true
+env:
+ # Used by the `Version` class so it can identify the current fork
+ PR_AUTHOR: ${{ github.event.pull_request.user.login || github.actor }}
+
jobs:
test:
runs-on: ubuntu-latest
@@ -39,7 +43,6 @@ jobs:
pip install .
- name: Test with pytest
run: |
- export PR_AUTHOR="${{ github.event.pull_request.user.login || github.actor }}"
mkdir artifacts
python -m pytest \
--color=yes \
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.