Skip to content

Commit 3d7fb4d

Browse files
committed
fix(security): SHARE_CTX_DETAIL last-reviewed SHA from step output
env.LAST_REVIEWED_SHA does not exist in the agent step - the value lives in steps.review_type.outputs.last_reviewed_sha (live-verified: the run context rendered "FOLLOW-UP (last reviewed )" with an empty SHA).
1 parent 82db8c4 commit 3d7fb4d

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/pr-review.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -766,7 +766,7 @@ jobs:
766766
SHARE_LINK_PUBKEY: ${{ secrets.SHARE_LINK_PUBKEY }}
767767
SHARE_CTX_THREAD: "PR #${{ inputs.prNumber || env.PR_NUMBER }}"
768768
SHARE_CTX_HEAD: ${{ env.PR_HEAD_SHA }}
769-
SHARE_CTX_DETAIL: ${{ steps.review_type.outputs.is_first_review == 'true' && 'FIRST review' || format('FOLLOW-UP (last reviewed {0})', env.LAST_REVIEWED_SHA) }}
769+
SHARE_CTX_DETAIL: ${{ steps.review_type.outputs.is_first_review == 'true' && 'FIRST review' || format('FOLLOW-UP (last reviewed {0})', steps.review_type.outputs.last_reviewed_sha) }}
770770
run: |
771771
set -o pipefail
772772
TMP_DIR="${RUNNER_TEMP:-/tmp}"

0 commit comments

Comments
 (0)