ci(codex): add autonomous merge gate executor

2026-07-07 00:02:18 +08:00
parent 759e343075
commit 2a81d8ced4
1 changed files with 38 additions and 0 deletions
@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+set -e
+
+BRANCH=$1
+BASE=${2:-main}
+
+if [ -z "$BRANCH" ]; then
+  echo "Usage: autonomous-merge-gate.sh <branch> <base>"
+  exit 1
+fi
+
+echo "[Autonomous Gate] Evaluating: $BRANCH vs $BASE"
+
+REPORT_DIR="reports/codex"
+mkdir -p "$REPORT_DIR"
+
+# 1. Run validation
+bash scripts/validate-gitops-platform-ui.sh "$BRANCH" "$BASE" > "$REPORT_DIR/validation.log" || true
+
+# 2. Build merge candidate
+STATUS=$?
+
+if [ $STATUS -ne 0 ]; then
+  echo "FAIL: validation failed"
+  exit 1
+fi
+
+# 3. Secret safety re-check
+if grep -R "BEGIN PRIVATE KEY" -n overlays/ >/dev/null 2>&1; then
+  echo "BLOCKED: secret leak"
+  exit 2
+fi
+
+# 4. Create merge candidate artifact
+echo "{\"branch\":\"$BRANCH\",\"status\":\"merge_candidate\"}" > "$REPORT_DIR/merge-candidate.json"
+
+echo "PASS: merge candidate ready"
+exit 0