Skip to content

ci: map OpenCode NIM through NVIDIA_NIM_API_KEY - #542

Closed
cursor[bot] wants to merge 2 commits into
mainfrom
cursor/bc-8d0ed6d0-0227-44f1-b24b-1dc75e0c7f9d-3414
Closed

ci: map OpenCode NIM through NVIDIA_NIM_API_KEY#542
cursor[bot] wants to merge 2 commits into
mainfrom
cursor/bc-8d0ed6d0-0227-44f1-b24b-1dc75e0c7f9d-3414

Conversation

@cursor

@cursor cursor Bot commented Aug 16, 2026

Copy link
Copy Markdown
Contributor

Landing vehicle for the NVIDIA NIM-only OpenCode cutover. Prefer this over #540.

Why this replaces #540

#540 correctly switches local and CI OpenCode config to nvidia-nim and removes GitHub Models / COPILOT_GITHUB_TOKEN from the OpenCode path. It still injects NVIDIA_API_KEY: ${{ secrets.NVIDIA_API_KEY }}. The organization secret is NVIDIA_NIM_API_KEY. The OpenCode client binding stays {env:NVIDIA_API_KEY}.

Without the mapping, OpenCode review steps receive an empty key and skip failed-check diagnosis.

Changes on top of #540

  • Four OpenCode review/approval env blocks now use NVIDIA_API_KEY: ${{ secrets.NVIDIA_NIM_API_KEY }}.
  • opencode.jsonc still reads {env:NVIDIA_API_KEY}.
  • scripts/ci/test_strix_quick_gate.sh locks the split and rejects a GitHub secret named NVIDIA_API_KEY.
  • AGENTS.md documents the local binding vs org secret so the next edit cannot collapse the names.
  • Strix scan provider policy is unchanged and still uses STRIX_GITHUB_MODELS_TOKEN.

Verification

  • bash scripts/ci/test_strix_quick_gate.sh passed.
  • python3 -m pytest tests/config/test_strix_batch_size_source.py tests/config/test_strix_deleted_file_scope_source.py tests/config/test_strix_static_repo_adaptations.py passed (6 tests).

Do not merge #540. After this PR is check-clean, close #540 as superseded.

Open in Web View Automation 

cursoragent and others added 2 commits August 16, 2026 16:15
Point local and CI OpenCode configs at nvidia-nim with NVIDIA_API_KEY,
defaulting to llama-3.3-nemotron-super-49b-v1.5. Remove GitHub Models
provider ids, STRIX_GITHUB_MODELS_TOKEN, and COPILOT_GITHUB_TOKEN from
OpenCode review.

Co-authored-by: Seongho Bae <seonghobae@users.noreply.github.com>
Keep the local OpenCode binding as NVIDIA_API_KEY, but inject the
organization secret NVIDIA_NIM_API_KEY in CI. Lock the split in the
Strix gate and AGENTS.md so the next edit cannot collapse the names.

Co-authored-by: Seongho Bae <seonghobae@users.noreply.github.com>

Copy link
Copy Markdown
Contributor

Superseded by #543 after fresh protected-develop reconciliation. This PR is correctly stricter than #540 about the NVIDIA_NIM_API_KEY organization secret, but its head is still based on historical main (16fd73f…), 336 commits behind current develop, and modifies a repository-local OpenCode workflow plus CI scripts that are absent from protected develop because the required review path is centrally owned by ContextualWisdomLab/.github. #543 preserves the useful local NIM-only opencode.jsonc contract on current develop, locks it with an executable unit regression, documents the central secret-injection boundary, and intentionally does not resurrect removed central-control files.

@seonghobae seonghobae closed this Aug 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants