Repository navigation
Conversation
Feature branches no longer run CI. Jobs triggered by pull_request(_target) run only when the head branch is `trunk`; push triggers are limited to main (release/env/tag pushes unchanged). trunk-guard.yml flags any PR into main that does not come from `trunk`.
|
Important
This repository does not receive automatic reviews because it has fewer than 10 stars. ⚙️ Run configuration
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
|
|
||
| jobs: | ||
| only-trunk-merges-to-main: | ||
| if: github.head_ref != 'trunk' |
There was a problem hiding this comment.
🟨 Fork trunk branches bypass merge guard
A fork PR named trunk passes only-trunk-merges-to-main because github.head_ref omits the source repository. The guard cannot enforce that only the repository's trunk merges into main.
Was this helpful? React with 👍 or 👎 to provide feedback.
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 17e94bd. Configure here.
| # `trunk` (via the merge train); CI runs only on the trunk -> main PR. | ||
| on: | ||
| pull_request: | ||
| branches: [main] |
There was a problem hiding this comment.
Guard misses retargeted main PRs
Low Severity
The pull_request trigger uses default activity types, which omit edited. Retargeting a pull request onto main therefore does not start this workflow, so a non-trunk PR moved onto main is never flagged.
Reviewed by Cursor Bugbot for commit 17e94bd. Configure here.
1 participant
Org-wide CI reduction: CI runs only on the
trunk→mainPR and on pushes tomain. Feature branches merge intotrunkand get no CI. Addstrunk-guard.ymlto flag PRs intomainthat don't come fromtrunk. Generated mechanically (jobif:gates + push branch filters); actionlint shows no new findings.🤖 Generated with Claude Code
Note
Medium Risk
Changes when and whether CI runs on PRs; misconfigured branch names could skip checks on unintended PRs or block legitimate merges until workflows are updated.
Overview
Narrows when CI runs so the main
checkjob inci.ymlonly executes on pushes tomainand on pull requests whose head branch istrunk. Other PRs (e.g. feature branches targetingmain) no longer trigger the full build/lint/test pipeline.Adds a
Trunk guardworkflow that fails fast on any PR intomainthat does not come fromtrunk, with a workflow error telling contributors to retarget totrunk. This enforces the merge train model where feature work lands ontrunkfirst and onlytrunkmerges tomain.Reviewed by Cursor Bugbot for commit 17e94bd. Bugbot is set up for automated code reviews on this repo. Configure here.