***v33 #33

Merged
gitea merged 1 commits from mitch into develop 2026-07-09 19:13:56 +00:00
Owner
No description provided.
gitea added 1 commit 2026-07-09 19:08:21 +00:00
V33
Some checks failed
ci/woodpecker/push/woodpecker Pipeline was successful
ci/woodpecker/pr/woodpecker Pipeline failed
ci/woodpecker/pull_request_closed/woodpecker Pipeline was successful
e52c2875f1
Author
Owner

🤖 drep AI Code Review

The PR contains a critical bug in the SSH key deployment step where $$SSH_KEY will expand to the process ID instead of the secret. The other changes correctly escape Woodpecker variables (${VAR}$${VAR}) to defer expansion to the shell, which is a security improvement for handling secrets. The index.php change is a trivial version bump.

Recommendation: 🔍 Needs Changes

Concerns:

  • SSH key deployment will fail due to $$ expansion bug
  • No tests or validation shown for the CI config changes

Generated by drep using nvidia/nemotron-3-ultra-550b-a55b:free

## 🤖 drep AI Code Review The PR contains a critical bug in the SSH key deployment step where `$$SSH_KEY` will expand to the process ID instead of the secret. The other changes correctly escape Woodpecker variables (`${VAR}` → `$${VAR}`) to defer expansion to the shell, which is a security improvement for handling secrets. The index.php change is a trivial version bump. **Recommendation:** 🔍 Needs Changes **Concerns:** - SSH key deployment will fail due to $$ expansion bug - No tests or validation shown for the CI config changes --- *Generated by drep using nvidia/nemotron-3-ultra-550b-a55b:free*
gitea reviewed 2026-07-09 19:09:02 +00:00
gitea left a comment
Author
Owner

Inline review comment generated by drep.

Inline review comment generated by drep.
@ -52,3 +52,3 @@
gitea:
url: https://gitea.git.mitchecp.com
token: ${GITEA_TOKEN}
token: $${GITEA_TOKEN}
Author
Owner

ℹ️ INFO: Good change: Using $${GITEA_TOKEN} instead of ${GITEA_TOKEN} defers variable expansion to the shell rather than having Woodpecker expand it at YAML parse time. This prevents secrets from appearing in command logs and process lists. Same pattern applies to lines 57-59 for LLM config.

ℹ️ **INFO**: Good change: Using `$${GITEA_TOKEN}` instead of `${GITEA_TOKEN}` defers variable expansion to the shell rather than having Woodpecker expand it at YAML parse time. This prevents secrets from appearing in command logs and process lists. Same pattern applies to lines 57-59 for LLM config.
gitea merged commit 7527b6185e into develop 2026-07-09 19:13:56 +00:00
Sign in to join this conversation.
No Reviewers
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: gitea/test#33
No description provided.