• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

stacklok / toolhive / 27303864416
67%

Build:
DEFAULT BRANCH: main
Ran 10 Jun 2026 08:27PM UTC
Jobs 1
Files 751
Run time 2min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

10 Jun 2026 08:21PM UTC coverage: 66.438% (+0.008%) from 66.43%
27303864416

push

github

web-flow
Trigger release notes via workflow_run not release event (#5490)

* Trigger release notes via workflow_run not release event

The Generate Release Notes workflow ran anthropics/claude-code-action
on the `release: published` event, but that action only accepts a fixed
set of event types and rejects `release` with "Unsupported event type:
release", failing the step before the skill could run.

Switch the trigger to workflow_run on "Create Release Tag" (the workflow
that creates the tag and GitHub Release). workflow_run is a supported
event and is not subject to the GITHUB_TOKEN downstream-trigger limit.
Resolve the tag from the VERSION file at the run's head commit and keep
workflow_dispatch for manual runs.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* Pass github_token to claude-code-action to skip OIDC

Without a github_token input, the action mints its own token via OIDC
(the Claude GitHub App flow), which fails with "Could not fetch an OIDC
token" unless the workflow has id-token: write and the app installed.
We only need the API key for Anthropic auth and GH_TOKEN for the skill's
read-only gh calls, so pass github.token directly to bypass OIDC.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* Check out default branch, not workflow_run head ref

Checking out github.event.workflow_run.head_sha in a workflow that has
access to secrets is the untrusted-checkout anti-pattern (flagged by
CodeQL actions/untrusted-checkout, high). The head ref was only used to
read VERSION; since "Create Release Tag" only runs on a VERSION push to
main, main HEAD already is the release commit, so checking out the
default branch yields the same VERSION without trusting an event ref.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

67525 of 101636 relevant lines covered (66.44%)

63.15 hits per line

Coverage Regressions

Lines Coverage ∆ File
2
96.47
0.0% pkg/authserver/storage/memory.go
Jobs
ID Job ID Ran Files Coverage
1 27303864416.1 10 Jun 2026 08:27PM UTC 751
66.44
GitHub Action Run
Source Files on build 27303864416
  • Tree
  • List 751
  • Changed 4
  • Source Changed 0
  • Coverage Changed 4
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Github Actions Build #27303864416
  • 359e9985 on github
  • Prev Build on main (#27301277258)
  • Next Build on main (#27304005142)
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc