From f396c447515cf7f47e31b1ec9de138b37be9f256 Mon Sep 17 00:00:00 2001 From: ruv Date: Thu, 14 May 2026 11:45:03 -0400 Subject: [PATCH] ci(verify-pipeline): fix stale v1/ working-directory + SECRET_KEY env MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Same drift as #559 but in CI: the workflow ran `working-directory: v1` on the two verify steps, but the Python codebase moved to `archive/v1/` ages ago. The job failed with: An error occurred trying to start process '/usr/bin/bash' with working directory '/home/runner/work/RuView/RuView/v1'. No such file or directory Fixed both occurrences (working-directory: v1 -> working-directory: archive/v1). Also added `SECRET_KEY` env var to both steps — `verify.py` transitively imports `src.app` -> `src.config.settings` (since PR #547 introduced pydantic-settings with a required `secret_key` field). The value is never used for any auth path in the proof pipeline; it just needs to satisfy the import chain. Same env-var workaround used locally to make `./verify` pass. After this commit, "Verify Pipeline Determinism (3.11)" should go green on this PR. Co-Authored-By: claude-flow --- .github/workflows/verify-pipeline.yml | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/.github/workflows/verify-pipeline.yml b/.github/workflows/verify-pipeline.yml index 0ba4dbf7..2bb0d284 100644 --- a/.github/workflows/verify-pipeline.yml +++ b/.github/workflows/verify-pipeline.yml @@ -57,7 +57,13 @@ jobs: " - name: Run pipeline verification - working-directory: v1 + working-directory: archive/v1 + env: + # verify.py transitively imports src.app -> src.config.settings, which + # uses pydantic-settings with a required `secret_key` field. The proof + # only needs the import chain to resolve; the value is never used for + # any auth path in the proof pipeline. + SECRET_KEY: ci-proof-replay-only-not-a-real-secret run: | echo "=== Running pipeline verification ===" python data/proof/verify.py @@ -65,7 +71,9 @@ jobs: echo "Pipeline verification PASSED." - name: Run verification twice to confirm determinism - working-directory: v1 + working-directory: archive/v1 + env: + SECRET_KEY: ci-proof-replay-only-not-a-real-secret run: | echo "=== Second run for determinism confirmation ===" python data/proof/verify.py