Skip to content

fix: install lychee in post-code and post-fix scripts #831

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ralphbean merged 1 commit into from
May 12, 2026
Merged

fix: install lychee in post-code and post-fix scripts #831

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 20 additions & 3 deletions internal/scaffold/fullsend-repo/scripts/post-code.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,8 @@ set -euo pipefail
# ---------------------------------------------------------------------------
GITLEAKS_VERSION="8.30.1"
GITLEAKS_SHA256="551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb"
LYCHEE_VERSION="0.24.2"
LYCHEE_SHA256="1f4e0ef7f6554a6ed33dd7ac144fb2e1bbed98598e7af973042fc5cd43951c9a"

# ---------------------------------------------------------------------------
# Setup
Expand Down Expand Up @@ -116,7 +118,22 @@ gitleaks detect --source . --log-opts="${SCAN_RANGE}" --redact
echo "Secret scan passed — no leaks in agent's commit(s)"

# ---------------------------------------------------------------------------
# 4. Authoritative pre-commit check
# 4. Install lychee (for pre-commit markdown link checking)
# ---------------------------------------------------------------------------
if ! command -v lychee >/dev/null 2>&1; then
echo "Installing lychee v${LYCHEE_VERSION}..."
mkdir -p "${HOME}/.local/bin"
curl -fsSL \
"https://github.com/lycheeverse/lychee/releases/download/lychee-v${LYCHEE_VERSION}/lychee-x86_64-unknown-linux-gnu.tar.gz" \
-o /tmp/lychee.tar.gz \
&& echo "${LYCHEE_SHA256} /tmp/lychee.tar.gz" | sha256sum -c - \
&& tar xzf /tmp/lychee.tar.gz -C "${HOME}/.local/bin" lychee \
&& rm /tmp/lychee.tar.gz
export PATH="${HOME}/.local/bin:${PATH}"
fi

# ---------------------------------------------------------------------------
# 5. Authoritative pre-commit check
# ---------------------------------------------------------------------------
if [ -f .pre-commit-config.yaml ]; then
echo "Running authoritative pre-commit on agent's changed files..."
Expand Down Expand Up @@ -148,7 +165,7 @@ else
fi

# ---------------------------------------------------------------------------
# 5. Push branch
# 6. Push branch
# ---------------------------------------------------------------------------
git remote set-url origin \
"https://x-access-token:${PUSH_TOKEN}@github.com/${REPO_FULL_NAME}.git"
Expand All @@ -157,7 +174,7 @@ echo "Pushing branch ${BRANCH}..."
git push --force-with-lease -u origin -- "${BRANCH}" 2>&1

# ---------------------------------------------------------------------------
# 6. Create PR
# 7. Create PR
# ---------------------------------------------------------------------------
export GH_TOKEN="${PUSH_TOKEN}"

Expand Down
27 changes: 22 additions & 5 deletions internal/scaffold/fullsend-repo/scripts/post-fix.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -58,6 +58,8 @@ PROTECTED_PATHS=(

GITLEAKS_VERSION="8.30.1"
GITLEAKS_SHA256="551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb"
LYCHEE_VERSION="0.24.2"
LYCHEE_SHA256="1f4e0ef7f6554a6ed33dd7ac144fb2e1bbed98598e7af973042fc5cd43951c9a"

# ---------------------------------------------------------------------------
# Setup
Expand Down Expand Up @@ -153,7 +155,22 @@ if [ "${NO_PUSH}" = "false" ]; then
fi

# ---------------------------------------------------------------------------
# 3. Authoritative pre-commit check (only if pushing)
# 3. Install lychee (for pre-commit markdown link checking)
# ---------------------------------------------------------------------------
if ! command -v lychee >/dev/null 2>&1; then
echo "Installing lychee v${LYCHEE_VERSION}..."
mkdir -p "${HOME}/.local/bin"
curl -fsSL \
"https://github.com/lycheeverse/lychee/releases/download/lychee-v${LYCHEE_VERSION}/lychee-x86_64-unknown-linux-gnu.tar.gz" \
-o /tmp/lychee.tar.gz \
&& echo "${LYCHEE_SHA256} /tmp/lychee.tar.gz" | sha256sum -c - \
&& tar xzf /tmp/lychee.tar.gz -C "${HOME}/.local/bin" lychee \
&& rm /tmp/lychee.tar.gz
export PATH="${HOME}/.local/bin:${PATH}"
fi

# ---------------------------------------------------------------------------
# 4. Authoritative pre-commit check (only if pushing)
# ---------------------------------------------------------------------------
if [ "${NO_PUSH}" = "false" ] && [ -f .pre-commit-config.yaml ]; then
echo "Running authoritative pre-commit on agent's changed files..."
Expand All @@ -179,7 +196,7 @@ if [ "${NO_PUSH}" = "false" ] && [ -f .pre-commit-config.yaml ]; then
fi

# ---------------------------------------------------------------------------
# 4. Push branch (only if we have commits)
# 5. Push branch (only if we have commits)
# ---------------------------------------------------------------------------
if [ "${NO_PUSH}" = "false" ]; then
git remote set-url origin \
Expand All @@ -195,7 +212,7 @@ if [ "${NO_PUSH}" = "false" ]; then
fi

# ---------------------------------------------------------------------------
# 5. Process structured output (fix-result.json)
# 6. Process structured output (fix-result.json)
# ---------------------------------------------------------------------------
export GH_TOKEN="${PUSH_TOKEN}"

Expand Down Expand Up @@ -247,7 +264,7 @@ else
fi

# ---------------------------------------------------------------------------
# 6. Iteration-cap warning label
# 7. Iteration-cap warning label
# ---------------------------------------------------------------------------
ITERATION="${FIX_ITERATION:-1}"
BOT_CAP="${ITERATION_CAP:-5}"
Expand All @@ -266,7 +283,7 @@ if [ "${ITERATION}" -ge "${WARN_THRESHOLD}" ] && is_bot_user "${TRIGGER_SOURCE}"
fi

# ---------------------------------------------------------------------------
# 7. Summary
# 8. Summary
# ---------------------------------------------------------------------------
echo ""
echo "Fix post-script complete:"
Expand Down
Loading