-
-
Notifications
You must be signed in to change notification settings - Fork 31
Add GitHub Actions workflow to run install.doctor on pull requests (U… #166
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
…buntu & macOS) Co-authored-by: openhands <openhands@all-hands.dev>
WalkthroughThis change introduces a GitHub Actions workflow that runs Changes
Uplevel your code reviews with CodeRabbit ProCodeRabbit ProIf you like this project, please support us by purchasing the Pro version. The Pro version has advanced context, superior noise reduction and several proprietary improvements compared to the open source version. Moreover, CodeRabbit Pro is free for open source projects. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Files selected (1)
- .github/workflows/pr-install-doctor.yml (1)
Review comments generated (1)
- Review: 1
- LGTM: 0
Tips
Chat with
CodeRabbit Bot (@coderabbitai)
- Reply on review comments left by this bot to ask follow-up questions. A review comment is a comment on a diff or a file.
- Invite the bot into a review comment chain by tagging
@coderabbitaiin a reply.
Code suggestions
- The bot may make code suggestions, but please review them carefully before committing since the line number ranges may be misaligned.
- You can edit the comment made by the bot and manually tweak the suggestion if it is slightly off.
Pausing incremental reviews
- Add
@coderabbitai: ignoreanywhere in the PR description to pause further reviews from the bot.
| name: "Run install.doctor on Pull Requests" | ||
|
|
||
| on: | ||
| pull_request: | ||
| types: [opened, synchronize, reopened] | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| jobs: | ||
| run_installer: | ||
| name: Run install.doctor on ${{ matrix.os }} | ||
| runs-on: ${{ matrix.os }} | ||
| strategy: | ||
| matrix: | ||
| os: [ubuntu-latest, macos-latest] | ||
| timeout-minutes: 20 | ||
| steps: | ||
| - name: Checkout repository | ||
| uses: actions/checkout@v4 | ||
|
|
||
| - name: Show runner info | ||
| run: | | ||
| echo "Runner OS: $RUNNER_OS" | ||
| uname -a || true | ||
|
|
||
| - name: Run install.doctor installer | ||
| shell: bash | ||
| env: | ||
| CI: true | ||
| run: | | ||
| echo "Running install.doctor installer" | ||
| bash <(curl -sSL https://install.doctor/start) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The workflow looks good overall, but there's a potential security concern in the script download and execution step. Downloading scripts from the internet and executing them directly can be risky if the server hosting the script is compromised. It would be safer to download the script, inspect it, and then run it.
- bash <(curl -sSL https://install.doctor/start)
+ curl -sSL https://install.doctor/start > install.sh
+ cat install.sh
+ bash install.shThis way, the content of the script will be printed to the console before execution, providing an opportunity to review what will be executed.
…buntu & macOS)
What kind of change does this PR introduce? (Bug fix, feature, docs update, ...)
What is the current behavior? (You can also link to an open issue here)
What is the new behavior (if this is a feature change)?
Other information:
Summary by CodeRabbit
install.doctoron pull requests. This enhancement ensures the installer runs smoothly on both Ubuntu and macOS platforms before any changes are merged. The workflow provides detailed runner information, contributing to better transparency and debugging capabilities.