fix(ci): bound Mantis runner IP discovery (#108699)

This commit is contained in:
Alix-007
2026-07-16 16:50:22 +08:00
committed by GitHub
parent c2b73a0a01
commit ea3ac194f4
2 changed files with 14 additions and 1 deletions
@@ -266,7 +266,7 @@ jobs:
require_var OPENCLAW_QA_CONVEX_SECRET_CI
require_var CRABBOX_COORDINATOR_TOKEN
if [[ -z "${CRABBOX_LEASE_ID:-}" && "$CRABBOX_PROVIDER" == "aws" ]]; then
runner_ip="$(curl -fsS https://checkip.amazonaws.com | tr -d '[:space:]')"
runner_ip="$(curl -fsS --connect-timeout 5 --max-time 15 --retry 2 https://checkip.amazonaws.com | tr -d '[:space:]')"
if [[ -z "$runner_ip" ]]; then
echo "Could not resolve GitHub runner public IPv4 for AWS SSH ingress." >&2
exit 1
+13
View File
@@ -2089,6 +2089,19 @@ describe("ci workflow guards", () => {
);
});
it("bounds Mantis Slack runner IP discovery", () => {
const workflow = parse(
readFileSync(".github/workflows/mantis-slack-desktop-smoke.yml", "utf8"),
) as { jobs: { run_slack_desktop: { steps: WorkflowStep[] } } };
const runStep = workflow.jobs.run_slack_desktop.steps.find(
(step) => step.name === "Run Slack desktop scenario",
);
expect(runStep?.run).toContain(
"curl -fsS --connect-timeout 5 --max-time 15 --retry 2 https://checkip.amazonaws.com",
);
});
it("fails Windows Testbox setup when Blacksmith phone-home is not accepted", () => {
const workflow = readFileSync(".github/workflows/windows-blacksmith-testbox.yml", "utf8");