mirror of
https://github.com/anthropics/claude-code-action.git
synced 2026-01-22 22:44:13 +08:00
feat: integrate claude-code-base-action as local subaction (#285)
* feat: integrate claude-code-base-action as local subaction
- Copy claude-code-base-action into base-action/ directory
- Update action.yml to reference ./base-action instead of external repo
- Preserve complete base action structure for future refactoring
This eliminates the external dependency while maintaining modularity.
* feat: consolidate CI workflows and add version bump workflow
- Move base-action test workflows to main .github/workflows/
- Update workflow references to use ./base-action
- Add CI jobs for base-action (test, typecheck, prettier)
- Add bump-claude-code-version workflow for base-action
- Remove redundant .github directory from base-action
This consolidates all CI workflows in one place while maintaining
full test coverage for both the main action and base-action.
* tsc
* copy again
* fix tests
* fix: use absolute path for base-action reference
Replace relative path ./base-action with ${{ github.action_path }}/base-action
to ensure the action works correctly when used in other repositories.
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
* fix: inline base-action execution to support usage in other repos
Replace uses: ./base-action with direct shell execution since GitHub Actions
doesn't support dynamic paths in composite actions. This ensures the action
works correctly when used in other repositories.
Changes:
- Install Claude Code globally before execution
- Run base-action's index.ts directly with bun
- Pass all required INPUT_* environment variables
- Maintain base-action for future separate publishing
🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <noreply@anthropic.com>
---------
Co-authored-by: Claude <noreply@anthropic.com>
This commit is contained in:
Ashwin Bhat
132
.github/workflows/bump-claude-code-version.yml
vendored
Normal file
132
.github/workflows/bump-claude-code-version.yml
vendored
Normal file
@@ -0,0 +1,132 @@
|
||||
name: Bump Claude Code Version
|
||||
|
||||
on:
|
||||
repository_dispatch:
|
||||
types: [bump_claude_code_version]
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
version:
|
||||
description: "Claude Code version to bump to"
|
||||
required: true
|
||||
type: string
|
||||
|
||||
permissions:
|
||||
contents: write
|
||||
|
||||
jobs:
|
||||
bump-version:
|
||||
name: Bump Claude Code Version
|
||||
runs-on: ubuntu-latest
|
||||
environment: release
|
||||
timeout-minutes: 5
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4
|
||||
with:
|
||||
token: ${{ secrets.RELEASE_PAT }}
|
||||
fetch-depth: 0
|
||||
|
||||
- name: Get version from event payload
|
||||
id: get_version
|
||||
run: |
|
||||
# Get version from either repository_dispatch or workflow_dispatch
|
||||
if [ "${{ github.event_name }}" = "repository_dispatch" ]; then
|
||||
NEW_VERSION="${CLIENT_PAYLOAD_VERSION}"
|
||||
else
|
||||
NEW_VERSION="${INPUT_VERSION}"
|
||||
fi
|
||||
|
||||
# Sanitize the version to avoid issues enabled by problematic characters
|
||||
NEW_VERSION=$(echo "$NEW_VERSION" | tr -d '`;$(){}[]|&<>' | tr -s ' ' '-')
|
||||
|
||||
if [ -z "$NEW_VERSION" ]; then
|
||||
echo "Error: version not provided"
|
||||
exit 1
|
||||
fi
|
||||
echo "NEW_VERSION=$NEW_VERSION" >> $GITHUB_ENV
|
||||
echo "new_version=$NEW_VERSION" >> $GITHUB_OUTPUT
|
||||
env:
|
||||
INPUT_VERSION: ${{ inputs.version }}
|
||||
CLIENT_PAYLOAD_VERSION: ${{ github.event.client_payload.version }}
|
||||
|
||||
- name: Create branch and update base-action/action.yml
|
||||
run: |
|
||||
# Variables
|
||||
TIMESTAMP=$(date +'%Y%m%d-%H%M%S')
|
||||
BRANCH_NAME="bump-claude-code-${{ env.NEW_VERSION }}-$TIMESTAMP"
|
||||
|
||||
echo "BRANCH_NAME=$BRANCH_NAME" >> $GITHUB_ENV
|
||||
|
||||
# Get the default branch
|
||||
DEFAULT_BRANCH=$(gh api repos/${GITHUB_REPOSITORY} --jq '.default_branch')
|
||||
echo "DEFAULT_BRANCH=$DEFAULT_BRANCH" >> $GITHUB_ENV
|
||||
|
||||
# Get the latest commit SHA from the default branch
|
||||
BASE_SHA=$(gh api repos/${GITHUB_REPOSITORY}/git/refs/heads/$DEFAULT_BRANCH --jq '.object.sha')
|
||||
|
||||
# Create a new branch
|
||||
gh api \
|
||||
--method POST \
|
||||
repos/${GITHUB_REPOSITORY}/git/refs \
|
||||
-f ref="refs/heads/$BRANCH_NAME" \
|
||||
-f sha="$BASE_SHA"
|
||||
|
||||
# Get the current base-action/action.yml content
|
||||
ACTION_CONTENT=$(gh api repos/${GITHUB_REPOSITORY}/contents/base-action/action.yml?ref=$DEFAULT_BRANCH --jq '.content' | base64 -d)
|
||||
|
||||
# Update the Claude Code version in the npm install command
|
||||
UPDATED_CONTENT=$(echo "$ACTION_CONTENT" | sed -E "s/(npm install -g @anthropic-ai\/claude-code@)[0-9]+\.[0-9]+\.[0-9]+/\1${{ env.NEW_VERSION }}/")
|
||||
|
||||
# Verify the change would be made
|
||||
if ! echo "$UPDATED_CONTENT" | grep -q "@anthropic-ai/claude-code@${{ env.NEW_VERSION }}"; then
|
||||
echo "Error: Failed to update Claude Code version in content"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Get the current SHA of base-action/action.yml for the update API call
|
||||
FILE_SHA=$(gh api repos/${GITHUB_REPOSITORY}/contents/base-action/action.yml?ref=$DEFAULT_BRANCH --jq '.sha')
|
||||
|
||||
# Create the updated base-action/action.yml content in base64
|
||||
echo "$UPDATED_CONTENT" | base64 > action.yml.b64
|
||||
|
||||
# Commit the updated base-action/action.yml via GitHub API
|
||||
gh api \
|
||||
--method PUT \
|
||||
repos/${GITHUB_REPOSITORY}/contents/base-action/action.yml \
|
||||
-f message="chore: bump Claude Code version to ${{ env.NEW_VERSION }}" \
|
||||
-F content=@action.yml.b64 \
|
||||
-f sha="$FILE_SHA" \
|
||||
-f branch="$BRANCH_NAME"
|
||||
|
||||
echo "Successfully created branch and updated Claude Code version to ${{ env.NEW_VERSION }}"
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.RELEASE_PAT }}
|
||||
GITHUB_REPOSITORY: ${{ github.repository }}
|
||||
|
||||
- name: Create Pull Request
|
||||
run: |
|
||||
# Determine trigger type for PR body
|
||||
if [ "${{ github.event_name }}" = "repository_dispatch" ]; then
|
||||
TRIGGER_INFO="repository dispatch event"
|
||||
else
|
||||
TRIGGER_INFO="manual workflow dispatch by @${GITHUB_ACTOR}"
|
||||
fi
|
||||
|
||||
# Create PR body with proper YAML escape
|
||||
printf -v PR_BODY "## Bump Claude Code to ${{ env.NEW_VERSION }}\n\nThis PR updates the Claude Code version in base-action/action.yml to ${{ env.NEW_VERSION }}.\n\n### Changes\n- Updated Claude Code version from current to \`${{ env.NEW_VERSION }}\`\n\n### Triggered by\n- $TRIGGER_INFO\n\n🤖 This PR was automatically created by the bump-claude-code-version workflow."
|
||||
|
||||
echo "Creating PR with gh pr create command"
|
||||
PR_URL=$(gh pr create \
|
||||
--repo "${GITHUB_REPOSITORY}" \
|
||||
--title "chore: bump Claude Code version to ${{ env.NEW_VERSION }}" \
|
||||
--body "$PR_BODY" \
|
||||
--base "${DEFAULT_BRANCH}" \
|
||||
--head "${BRANCH_NAME}")
|
||||
|
||||
echo "PR created successfully: $PR_URL"
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.RELEASE_PAT }}
|
||||
GITHUB_REPOSITORY: ${{ github.repository }}
|
||||
GITHUB_ACTOR: ${{ github.actor }}
|
||||
DEFAULT_BRANCH: ${{ env.DEFAULT_BRANCH }}
|
||||
BRANCH_NAME: ${{ env.BRANCH_NAME }}
|
||||
122
.github/workflows/test-base-action.yml
vendored
Normal file
122
.github/workflows/test-base-action.yml
vendored
Normal file
@@ -0,0 +1,122 @@
|
||||
name: Test Claude Code Action
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
pull_request:
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
test_prompt:
|
||||
description: "Test prompt for Claude"
|
||||
required: false
|
||||
default: "List the files in the current directory starting with 'package'"
|
||||
|
||||
jobs:
|
||||
test-inline-prompt:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
||||
|
||||
- name: Test with inline prompt
|
||||
id: inline-test
|
||||
uses: ./base-action
|
||||
with:
|
||||
prompt: ${{ github.event.inputs.test_prompt || 'List the files in the current directory starting with "package"' }}
|
||||
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
|
||||
allowed_tools: "LS,Read"
|
||||
timeout_minutes: "3"
|
||||
|
||||
- name: Verify inline prompt output
|
||||
run: |
|
||||
OUTPUT_FILE="${{ steps.inline-test.outputs.execution_file }}"
|
||||
CONCLUSION="${{ steps.inline-test.outputs.conclusion }}"
|
||||
|
||||
echo "Conclusion: $CONCLUSION"
|
||||
echo "Output file: $OUTPUT_FILE"
|
||||
|
||||
if [ "$CONCLUSION" = "success" ]; then
|
||||
echo "✅ Action completed successfully"
|
||||
else
|
||||
echo "❌ Action failed"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [ -f "$OUTPUT_FILE" ]; then
|
||||
if [ -s "$OUTPUT_FILE" ]; then
|
||||
echo "✅ Execution log file created successfully with content"
|
||||
echo "Validating JSON format:"
|
||||
if jq . "$OUTPUT_FILE" > /dev/null 2>&1; then
|
||||
echo "✅ Output is valid JSON"
|
||||
echo "Content preview:"
|
||||
head -c 200 "$OUTPUT_FILE"
|
||||
else
|
||||
echo "❌ Output is not valid JSON"
|
||||
exit 1
|
||||
fi
|
||||
else
|
||||
echo "❌ Execution log file is empty"
|
||||
exit 1
|
||||
fi
|
||||
else
|
||||
echo "❌ Execution log file not found"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
test-prompt-file:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
||||
|
||||
- name: Create test prompt file
|
||||
run: |
|
||||
cat > test-prompt.txt << EOF
|
||||
${PROMPT}
|
||||
EOF
|
||||
env:
|
||||
PROMPT: ${{ github.event.inputs.test_prompt || 'List the files in the current directory starting with "package"' }}
|
||||
|
||||
- name: Test with prompt file and allowed tools
|
||||
id: prompt-file-test
|
||||
uses: ./base-action
|
||||
with:
|
||||
prompt_file: "test-prompt.txt"
|
||||
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
|
||||
allowed_tools: "LS,Read"
|
||||
timeout_minutes: "3"
|
||||
|
||||
- name: Verify prompt file output
|
||||
run: |
|
||||
OUTPUT_FILE="${{ steps.prompt-file-test.outputs.execution_file }}"
|
||||
CONCLUSION="${{ steps.prompt-file-test.outputs.conclusion }}"
|
||||
|
||||
echo "Conclusion: $CONCLUSION"
|
||||
echo "Output file: $OUTPUT_FILE"
|
||||
|
||||
if [ "$CONCLUSION" = "success" ]; then
|
||||
echo "✅ Action completed successfully"
|
||||
else
|
||||
echo "❌ Action failed"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [ -f "$OUTPUT_FILE" ]; then
|
||||
if [ -s "$OUTPUT_FILE" ]; then
|
||||
echo "✅ Execution log file created successfully with content"
|
||||
echo "Validating JSON format:"
|
||||
if jq . "$OUTPUT_FILE" > /dev/null 2>&1; then
|
||||
echo "✅ Output is valid JSON"
|
||||
echo "Content preview:"
|
||||
head -c 200 "$OUTPUT_FILE"
|
||||
else
|
||||
echo "❌ Output is not valid JSON"
|
||||
exit 1
|
||||
fi
|
||||
else
|
||||
echo "❌ Execution log file is empty"
|
||||
exit 1
|
||||
fi
|
||||
else
|
||||
echo "❌ Execution log file not found"
|
||||
exit 1
|
||||
fi
|
||||
47
.github/workflows/test-claude-env.yml
vendored
Normal file
47
.github/workflows/test-claude-env.yml
vendored
Normal file
@@ -0,0 +1,47 @@
|
||||
name: Test Claude Env Feature
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
pull_request:
|
||||
workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
test-claude-env-with-comments:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
||||
|
||||
- name: Test with comments in env
|
||||
id: comment-test
|
||||
uses: ./base-action
|
||||
with:
|
||||
prompt: |
|
||||
Use the Bash tool to run: echo "VAR1: $VAR1" && echo "VAR2: $VAR2"
|
||||
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
|
||||
claude_env: |
|
||||
# This is a comment
|
||||
VAR1: value1
|
||||
# Another comment
|
||||
VAR2: value2
|
||||
|
||||
# Empty lines above should be ignored
|
||||
allowed_tools: "Bash(echo:*)"
|
||||
timeout_minutes: "2"
|
||||
|
||||
- name: Verify comment handling
|
||||
run: |
|
||||
OUTPUT_FILE="${{ steps.comment-test.outputs.execution_file }}"
|
||||
if [ "${{ steps.comment-test.outputs.conclusion }}" = "success" ]; then
|
||||
echo "✅ Comments in claude_env handled correctly"
|
||||
if grep -q "value1" "$OUTPUT_FILE" && grep -q "value2" "$OUTPUT_FILE"; then
|
||||
echo "✅ Environment variables set correctly despite comments"
|
||||
else
|
||||
echo "❌ Environment variables not found"
|
||||
exit 1
|
||||
fi
|
||||
else
|
||||
echo "❌ Failed with comments in claude_env"
|
||||
exit 1
|
||||
fi
|
||||
160
.github/workflows/test-mcp-servers.yml
vendored
Normal file
160
.github/workflows/test-mcp-servers.yml
vendored
Normal file
@@ -0,0 +1,160 @@
|
||||
name: Test MCP Servers
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [main]
|
||||
pull_request:
|
||||
branches: [main]
|
||||
workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
test-mcp-integration:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4
|
||||
|
||||
- name: Setup Bun
|
||||
uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 #v2
|
||||
|
||||
- name: Install dependencies
|
||||
run: |
|
||||
bun install
|
||||
cd base-action/test/mcp-test
|
||||
bun install
|
||||
|
||||
- name: Run Claude Code with MCP test
|
||||
uses: ./base-action
|
||||
id: claude-test
|
||||
with:
|
||||
prompt: "List all available tools"
|
||||
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
|
||||
env:
|
||||
# Change to test directory so it finds .mcp.json
|
||||
CLAUDE_WORKING_DIR: ${{ github.workspace }}/base-action/test/mcp-test
|
||||
|
||||
- name: Check MCP server output
|
||||
run: |
|
||||
echo "Checking Claude output for MCP servers..."
|
||||
|
||||
# Parse the JSON output
|
||||
OUTPUT_FILE="${RUNNER_TEMP}/claude-execution-output.json"
|
||||
|
||||
if [ ! -f "$OUTPUT_FILE" ]; then
|
||||
echo "Error: Output file not found!"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "Output file contents:"
|
||||
cat $OUTPUT_FILE
|
||||
|
||||
# Check if mcp_servers field exists in the init event
|
||||
if jq -e '.[] | select(.type == "system" and .subtype == "init") | .mcp_servers' "$OUTPUT_FILE" > /dev/null; then
|
||||
echo "✓ Found mcp_servers in output"
|
||||
|
||||
# Check if test-server is connected
|
||||
if jq -e '.[] | select(.type == "system" and .subtype == "init") | .mcp_servers[] | select(.name == "test-server" and .status == "connected")' "$OUTPUT_FILE" > /dev/null; then
|
||||
echo "✓ test-server is connected"
|
||||
else
|
||||
echo "✗ test-server not found or not connected"
|
||||
jq '.[] | select(.type == "system" and .subtype == "init") | .mcp_servers' "$OUTPUT_FILE"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Check if mcp tools are available
|
||||
if jq -e '.[] | select(.type == "system" and .subtype == "init") | .tools[] | select(. == "mcp__test-server__test_tool")' "$OUTPUT_FILE" > /dev/null; then
|
||||
echo "✓ MCP test tool found"
|
||||
else
|
||||
echo "✗ MCP test tool not found"
|
||||
jq '.[] | select(.type == "system" and .subtype == "init") | .tools' "$OUTPUT_FILE"
|
||||
exit 1
|
||||
fi
|
||||
else
|
||||
echo "✗ No mcp_servers field found in init event"
|
||||
jq '.[] | select(.type == "system" and .subtype == "init")' "$OUTPUT_FILE"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "✓ All MCP server checks passed!"
|
||||
|
||||
test-mcp-config-flag:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout repository
|
||||
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4
|
||||
|
||||
- name: Setup Bun
|
||||
uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 #v2
|
||||
|
||||
- name: Install dependencies
|
||||
run: |
|
||||
bun install
|
||||
cd base-action/test/mcp-test
|
||||
bun install
|
||||
|
||||
- name: Debug environment paths (--mcp-config test)
|
||||
run: |
|
||||
echo "=== Environment Variables (--mcp-config test) ==="
|
||||
echo "HOME: $HOME"
|
||||
echo ""
|
||||
echo "=== Expected Config Paths ==="
|
||||
echo "GitHub action writes to: $HOME/.claude/settings.json"
|
||||
echo "Claude should read from: $HOME/.claude/settings.json"
|
||||
echo ""
|
||||
echo "=== Actual File System ==="
|
||||
ls -la $HOME/.claude/ || echo "No $HOME/.claude directory"
|
||||
|
||||
- name: Run Claude Code with --mcp-config flag
|
||||
uses: ./base-action
|
||||
id: claude-config-test
|
||||
with:
|
||||
prompt: "List all available tools"
|
||||
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
|
||||
mcp_config: '{"mcpServers":{"test-server":{"type":"stdio","command":"bun","args":["simple-mcp-server.ts"],"env":{}}}}'
|
||||
env:
|
||||
# Change to test directory so bun can find the MCP server script
|
||||
CLAUDE_WORKING_DIR: ${{ github.workspace }}/base-action/test/mcp-test
|
||||
|
||||
- name: Check MCP server output with --mcp-config
|
||||
run: |
|
||||
echo "Checking Claude output for MCP servers with --mcp-config flag..."
|
||||
|
||||
# Parse the JSON output
|
||||
OUTPUT_FILE="${RUNNER_TEMP}/claude-execution-output.json"
|
||||
|
||||
if [ ! -f "$OUTPUT_FILE" ]; then
|
||||
echo "Error: Output file not found!"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "Output file contents:"
|
||||
cat $OUTPUT_FILE
|
||||
|
||||
# Check if mcp_servers field exists in the init event
|
||||
if jq -e '.[] | select(.type == "system" and .subtype == "init") | .mcp_servers' "$OUTPUT_FILE" > /dev/null; then
|
||||
echo "✓ Found mcp_servers in output"
|
||||
|
||||
# Check if test-server is connected
|
||||
if jq -e '.[] | select(.type == "system" and .subtype == "init") | .mcp_servers[] | select(.name == "test-server" and .status == "connected")' "$OUTPUT_FILE" > /dev/null; then
|
||||
echo "✓ test-server is connected"
|
||||
else
|
||||
echo "✗ test-server not found or not connected"
|
||||
jq '.[] | select(.type == "system" and .subtype == "init") | .mcp_servers' "$OUTPUT_FILE"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Check if mcp tools are available
|
||||
if jq -e '.[] | select(.type == "system" and .subtype == "init") | .tools[] | select(. == "mcp__test-server__test_tool")' "$OUTPUT_FILE" > /dev/null; then
|
||||
echo "✓ MCP test tool found"
|
||||
else
|
||||
echo "✗ MCP test tool not found"
|
||||
jq '.[] | select(.type == "system" and .subtype == "init") | .tools' "$OUTPUT_FILE"
|
||||
exit 1
|
||||
fi
|
||||
else
|
||||
echo "✗ No mcp_servers field found in init event"
|
||||
jq '.[] | select(.type == "system" and .subtype == "init")' "$OUTPUT_FILE"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "✓ All MCP server checks passed with --mcp-config flag!"
|
||||
185
.github/workflows/test-settings.yml
vendored
Normal file
185
.github/workflows/test-settings.yml
vendored
Normal file
@@ -0,0 +1,185 @@
|
||||
name: Test Settings Feature
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
pull_request:
|
||||
workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
test-settings-inline-allow:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
||||
|
||||
- name: Test with inline settings JSON (echo allowed)
|
||||
id: inline-settings-test
|
||||
uses: ./base-action
|
||||
with:
|
||||
prompt: |
|
||||
Use Bash to echo "Hello from settings test"
|
||||
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
|
||||
settings: |
|
||||
{
|
||||
"permissions": {
|
||||
"allow": ["Bash(echo:*)"]
|
||||
}
|
||||
}
|
||||
timeout_minutes: "2"
|
||||
|
||||
- name: Verify echo worked
|
||||
run: |
|
||||
OUTPUT_FILE="${{ steps.inline-settings-test.outputs.execution_file }}"
|
||||
CONCLUSION="${{ steps.inline-settings-test.outputs.conclusion }}"
|
||||
|
||||
echo "Conclusion: $CONCLUSION"
|
||||
|
||||
if [ "$CONCLUSION" = "success" ]; then
|
||||
echo "✅ Action completed successfully"
|
||||
else
|
||||
echo "❌ Action failed"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Check that permission was NOT denied
|
||||
if grep -q "Permission to use Bash with command echo.*has been denied" "$OUTPUT_FILE"; then
|
||||
echo "❌ Echo command was denied when it should have been allowed"
|
||||
cat "$OUTPUT_FILE"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Check if the echo command worked
|
||||
if grep -q "Hello from settings test" "$OUTPUT_FILE"; then
|
||||
echo "✅ Bash echo command worked (allowed by permissions)"
|
||||
else
|
||||
echo "❌ Bash echo command didn't work"
|
||||
cat "$OUTPUT_FILE"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
test-settings-inline-deny:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
||||
|
||||
- name: Test with inline settings JSON (echo denied)
|
||||
id: inline-settings-test
|
||||
uses: ./base-action
|
||||
with:
|
||||
prompt: |
|
||||
Use Bash to echo "This should not work"
|
||||
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
|
||||
settings: |
|
||||
{
|
||||
"permissions": {
|
||||
"deny": ["Bash(echo:*)"]
|
||||
}
|
||||
}
|
||||
timeout_minutes: "2"
|
||||
|
||||
- name: Verify echo was denied
|
||||
run: |
|
||||
OUTPUT_FILE="${{ steps.inline-settings-test.outputs.execution_file }}"
|
||||
|
||||
# Check that permission was denied in the tool_result
|
||||
if grep -q "Permission to use Bash with command echo.*has been denied" "$OUTPUT_FILE"; then
|
||||
echo "✅ Echo command was correctly denied by permissions"
|
||||
else
|
||||
echo "❌ Expected permission denied message not found"
|
||||
cat "$OUTPUT_FILE"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
test-settings-file-allow:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
||||
|
||||
- name: Create settings file (echo allowed)
|
||||
run: |
|
||||
cat > test-settings.json << EOF
|
||||
{
|
||||
"permissions": {
|
||||
"allow": ["Bash(echo:*)"]
|
||||
}
|
||||
}
|
||||
EOF
|
||||
|
||||
- name: Test with settings file
|
||||
id: file-settings-test
|
||||
uses: ./base-action
|
||||
with:
|
||||
prompt: |
|
||||
Use Bash to echo "Hello from settings file test"
|
||||
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
|
||||
settings: "test-settings.json"
|
||||
timeout_minutes: "2"
|
||||
|
||||
- name: Verify echo worked
|
||||
run: |
|
||||
OUTPUT_FILE="${{ steps.file-settings-test.outputs.execution_file }}"
|
||||
CONCLUSION="${{ steps.file-settings-test.outputs.conclusion }}"
|
||||
|
||||
echo "Conclusion: $CONCLUSION"
|
||||
|
||||
if [ "$CONCLUSION" = "success" ]; then
|
||||
echo "✅ Action completed successfully"
|
||||
else
|
||||
echo "❌ Action failed"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Check that permission was NOT denied
|
||||
if grep -q "Permission to use Bash with command echo.*has been denied" "$OUTPUT_FILE"; then
|
||||
echo "❌ Echo command was denied when it should have been allowed"
|
||||
cat "$OUTPUT_FILE"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Check if the echo command worked
|
||||
if grep -q "Hello from settings file test" "$OUTPUT_FILE"; then
|
||||
echo "✅ Bash echo command worked (allowed by permissions)"
|
||||
else
|
||||
echo "❌ Bash echo command didn't work"
|
||||
cat "$OUTPUT_FILE"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
test-settings-file-deny:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
|
||||
|
||||
- name: Create settings file (echo denied)
|
||||
run: |
|
||||
cat > test-settings.json << EOF
|
||||
{
|
||||
"permissions": {
|
||||
"deny": ["Bash(echo:*)"]
|
||||
}
|
||||
}
|
||||
EOF
|
||||
|
||||
- name: Test with settings file
|
||||
id: file-settings-test
|
||||
uses: ./base-action
|
||||
with:
|
||||
prompt: |
|
||||
Use Bash to echo "This should not work from file"
|
||||
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
|
||||
settings: "test-settings.json"
|
||||
timeout_minutes: "2"
|
||||
|
||||
- name: Verify echo was denied
|
||||
run: |
|
||||
OUTPUT_FILE="${{ steps.file-settings-test.outputs.execution_file }}"
|
||||
|
||||
# Check that permission was denied in the tool_result
|
||||
if grep -q "Permission to use Bash with command echo.*has been denied" "$OUTPUT_FILE"; then
|
||||
echo "✅ Echo command was correctly denied by permissions"
|
||||
else
|
||||
echo "❌ Expected permission denied message not found"
|
||||
cat "$OUTPUT_FILE"
|
||||
exit 1
|
||||
fi
|
||||
Reference in New Issue
Block a user