feat: add repository and repository_path inputs for enhanced configuration by github-actions[bot] · Pull Request #220 · devops-infra/action-pull-request

github-actions · 2026-05-23T12:25:59Z

📝 Brief description

feat: add repository and repository_path inputs for enhanced configuration
fix: enhance repository validation in entrypoint script and add tests
test: add validation for repository names containing dot in tests
feat: update entrypoint and test scripts for improved GitHub token handling and repository validation

💻 Commits

0a9fff4 - ChristophShyper - 2026-05-23 16:59:59
| feat: update entrypoint and test scripts for improved GitHub token handling and repository validation
|
dc75c12 - ChristophShyper - 2026-05-23 16:47:15
| test: add validation for repository names containing dot in tests
|
42456d1 - ChristophShyper - 2026-05-23 16:21:28
| fix: enhance repository validation in entrypoint script and add tests
|
8a9fc99 - ChristophShyper - 2026-05-23 14:25:18
feat: add repository and repository_path inputs for enhanced configuration

📁 Modified files

README.md | 55 +++++---
Taskfile.scripts.yml | 14 +-
action.yml | 8 ++
entrypoint.sh | 104 +++++++++++----
.../unit/test_repository_configuration.sh (new +x) | 133 +++++++++++++++++++
tests/unit/test_repository_validation.sh (new +x) | 141 +++++++++++++++++++++
tests/unit/test_template_source_selection.sh | 42 ++++--
7 files changed, 434 insertions(+), 63 deletions(-)

⚠️ Additional information

Pushed to a branch with a proper name and provided proper commit message.
Provided a clear and concise description of what the issue is.

Check CONTRIBUTING.md and CODE_OF_CONDUCT.md for more information

…ation

ChristophShyper · 2026-05-23T12:27:42Z

Relates to #95 and devops-infra/action-commit-push#96

Copilot

Pull request overview

Adds configurability for running the action against a specific repository and/or when the checked-out repo lives in a subdirectory of GITHUB_WORKSPACE (e.g., actions/checkout with path:). This also introduces temporary global git config isolation via GIT_CONFIG_GLOBAL to avoid touching runner/user-level git config.

Changes:

Add new inputs repository and repository_path (and document them) to support custom checkout paths / target repos.
Update entrypoint.sh to resolve/validate repo path, use git -C, and switch API calls to the resolved target repository.
Add/adjust unit tests to cover repository configuration and template source selection with a repository subdirectory.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
`README.md`	Documents new `repository` / `repository_path` inputs and shows checkout-with-path usage.
`Taskfile.scripts.yml`	Updates version-bump sed rules to use regex-based matching for tag updates.
`action.yml`	Declares new action inputs and keeps `GITHUB_TOKEN` env wiring.
`entrypoint.sh`	Implements repository/repository_path resolution, path safety checks, and uses `TARGET_REPOSITORY` for API calls.
`tests/unit/test_repository_configuration.sh`	New unit test validating repository path resolution + isolated git global config.
`tests/unit/test_template_source_selection.sh`	Updates stubs to support `git -C` and exercises repository_path usage.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

ChristophShyper · 2026-05-23T14:20:12Z

+if ! git -C "${REPO_DIR}" rev-parse --is-inside-work-tree >/dev/null 2>&1; then
+  echo -e "\n[ERROR] Path is not a git repository: ${REPO_DIR}" >&2
+  exit 1
+fi


ChristophShyper · 2026-05-23T14:20:17Z

+TARGET_REPOSITORY="${INPUT_REPOSITORY:-${GITHUB_REPOSITORY}}"
+if [[ -z "${TARGET_REPOSITORY}" ]]; then
+  echo -e "\n[ERROR] Unable to resolve repository. Set input 'repository' or ensure GITHUB_REPOSITORY is available." >&2
+  exit 1
+fi
+if [[ ! "${TARGET_REPOSITORY}" =~ ^[^/]+/[^/]+$ ]]; then
+  echo -e "\n[ERROR] Input 'repository' must use owner/name format. Got: ${TARGET_REPOSITORY}" >&2
+  exit 1
+fi


Copilot

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated 1 comment.

ChristophShyper · 2026-05-23T14:44:35Z

+  echo -e "\n[ERROR] Input 'repository' must use owner/name format. Got: ${TARGET_REPOSITORY}" >&2
+  exit 1
+fi
+if [[ "${TARGET_REPOSITORY}" == *".."* || "${TARGET_REPOSITORY}" == */.* || "${TARGET_REPOSITORY}" == */*. || "${TARGET_REPOSITORY}" == *"/."* ]]; then


Copilot

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated 2 comments.

ChristophShyper · 2026-05-23T14:55:37Z

+fi
+
+echo -e "\nSetting GitHub credentials..."
+git -C "${REPO_DIR}" remote set-url origin "https://${GITHUB_ACTOR}:${GITHUB_TOKEN}@github.com/${TARGET_REPOSITORY}"


ChristophShyper · 2026-05-23T14:56:11Z

+INPUT_NEW_STRING="" \
+INPUT_IGNORE_USERS="ci-user" \
+INPUT_ALLOW_NO_DIFF="false" \


…ndling and repository validation

Copilot

Pull request overview

Copilot reviewed 7 out of 7 changed files in this pull request and generated no new comments.

This is a `-s ours` (strategy-ours) merge. It records `upstream/master` at SHA c5a99ac as a second parent of our HEAD without changing a single byte of our tree — the entire point is to update git's commit-reachability graph so that GitHub's "X commits ahead / Y commits behind" comparison between this fork and devops-infra/action-pull-request stops counting those 13 upstream commits as "behind". The actual content reconciliation already happened in PR #2 (commits 0b5126e + 832dfcc), where I selectively ported upstream's security and feature improvements onto our gh-CLI-based fork after a security review: - repository / repository_path inputs (multi-repo support) - max_body_bytes / max_diff_lines (large-diff overflow handling) - GIT_CONFIG_GLOBAL isolation - repository regex + path-traversal validation - perl-based template substitution via scripts/replace-template-diff.sh - body-overflow split into managed PR comments - 7 new unit tests under tests/unit/ NOT merged from upstream (deliberately, per fork policy "no new third parties"): - new .github/workflows/* that call devops-infra/.github reusable workflows or devops-infra/triglav with `secrets: inherit` - action.yml `image: docker://devopsinfra/...` (we keep `image: Dockerfile` so consumers build from our source) - Taskfile.scripts.yml dev-time refactor The 13 upstream commits being recorded as ancestors: c5a99ac chore(release): prepare v1.2.1 (devops-infra#227) 6aa878a feat: add Triglav as end-to-end test orchestrator (devops-infra#222) 562d37b chore(release): prepare v1.2.0 (devops-infra#221) 766f664 feat: add repository and repository_path inputs (devops-infra#220) 86d8692 chore(release): prepare v1.1.3 (devops-infra#219) 0ca8a22 fix: update README for clarity and versioning (devops-infra#218) eb4c48b chore(release): prepare v1.1.2 (devops-infra#217) 5b6f69b fix: update Alpine package handling (devops-infra#216) ea294d9 feat: improve workflow linting (devops-infra#215) 378b46d chore: update action-pull-request to v1.1.1 (devops-infra#212) a8b34a6 chore: update action-pull-request to v1.1.0 (devops-infra#211) 0916b92 feat: harden action for handling large diffs (devops-infra#210) 889cc9b feat: group GitHub Actions and Docker (devops-infra#209)

feat: add repository and repository_path inputs for enhanced configur…

8a9fc99

…ation

github-actions Bot requested review from a team and ChristophShyper as code owners May 23, 2026 12:26

github-actions Bot assigned ChristophShyper May 23, 2026

ChristophShyper requested a review from Copilot May 23, 2026 12:31

Copilot started reviewing on behalf of ChristophShyper May 23, 2026 12:31 View session

Copilot AI reviewed May 23, 2026

View reviewed changes

fix: enhance repository validation in entrypoint script and add tests

42456d1

ChristophShyper requested a review from Copilot May 23, 2026 14:37

Copilot started reviewing on behalf of ChristophShyper May 23, 2026 14:37 View session

Copilot AI reviewed May 23, 2026

View reviewed changes

test: add validation for repository names containing dot in tests

dc75c12

ChristophShyper requested a review from Copilot May 23, 2026 14:48

Copilot started reviewing on behalf of ChristophShyper May 23, 2026 14:48 View session

Copilot AI reviewed May 23, 2026

View reviewed changes

feat: update entrypoint and test scripts for improved GitHub token ha…

0a9fff4

…ndling and repository validation

ChristophShyper requested a review from Copilot May 23, 2026 15:00

Copilot started reviewing on behalf of ChristophShyper May 23, 2026 15:00 View session

Copilot AI reviewed May 23, 2026

View reviewed changes

ChristophShyper approved these changes May 23, 2026

View reviewed changes

ChristophShyper merged commit 766f664 into master May 23, 2026
4 checks passed

ChristophShyper deleted the feat/path branch May 23, 2026 15:06

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: add repository and repository_path inputs for enhanced configuration#220

feat: add repository and repository_path inputs for enhanced configuration#220
ChristophShyper merged 4 commits into
masterfrom
feat/path

github-actions Bot commented May 23, 2026 •

edited

Loading

Uh oh!

ChristophShyper commented May 23, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

ChristophShyper May 23, 2026

Uh oh!

ChristophShyper May 23, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

ChristophShyper May 23, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

ChristophShyper May 23, 2026

Uh oh!

ChristophShyper May 23, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

2 participants

Conversation

github-actions Bot commented May 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📝 Brief description

💻 Commits

📁 Modified files

⚠️ Additional information

Uh oh!

ChristophShyper commented May 23, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

ChristophShyper May 23, 2026

Choose a reason for hiding this comment

Uh oh!

ChristophShyper May 23, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

ChristophShyper May 23, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

ChristophShyper May 23, 2026

Choose a reason for hiding this comment

Uh oh!

ChristophShyper May 23, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Milestone

Development

Uh oh!

2 participants

github-actions Bot commented May 23, 2026 •

edited

Loading