https://github.com/officecli/officecli-ci
https://github.com/officecli/officecli-ci
Last synced: 12 days ago
JSON representation
- Host: GitHub
- URL: https://github.com/officecli/officecli-ci
- Owner: officecli
- Created: 2026-04-16T02:23:03.000Z (about 2 months ago)
- Default Branch: main
- Last Pushed: 2026-05-28T02:14:46.000Z (16 days ago)
- Last Synced: 2026-05-28T04:06:57.293Z (15 days ago)
- Size: 134 KB
- Stars: 2
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# officecli-ci
Public GitHub Actions orchestration for the private `officecli/officecli` repository.
This repository stores workflow definitions only. It does not mirror private source code.
## Security model
- Private source is checked out from `officecli/officecli` at runtime.
- Source access uses the `SOURCE_REPO_TOKEN` Actions secret.
- No production or release secret is copied here automatically.
- Release and inspection workflows stay gated until the required secrets are added manually.
- `Private Main CI` also covers the old private-repo wrapper smoke test and public npm/skills sync flows.
## Required secrets
- `SOURCE_REPO_TOKEN`: read access to `officecli/officecli`
Optional secrets for gated workflows:
- `PUBLIC_DIST_REPO_TOKEN`
- `PUBLIC_NPM_REPO_TOKEN`
- `PUBLIC_SKILLS_REPO_TOKEN`
- `HOMEBREW_TAP_TOKEN`
- `PLATFORM_LICENSE_PROOF_SEED`
- `CLI_EMBEDDED_PUBLISH_AUTH_KEY`
- `OFFICE_CLI_LLM_BASE_URL`
- `OFFICE_CLI_LLM_API_KEY`
- `OFFICE_CLI_LICENSE_API_KEY`
- `OFFICE_CLI_PUBLISH_API_KEY`
- `CLI_E2E_EMAIL_SMTP_HOST`
- `CLI_E2E_EMAIL_SMTP_USERNAME`
- `CLI_E2E_EMAIL_SMTP_PASSWORD`
- `DINGTALK_WEBHOOK`
- `INSPECTION_FINGERPRINT_HASH`
- `INSPECTION_API_KEY`
- `INSPECTION_BLOCKED_API_KEY`
- `INSPECTION_USER_ID`
- `PLATFORM_APP_SESSION_SECRET`
- `PLATFORM_PREVIEW_OBJECT_ACCESS_KEY`
- `PLATFORM_PREVIEW_OBJECT_SECRET_KEY`
- `PLATFORM_OFFICESDK_JWT_SECRET`
- `PLATFORM_SSH_PRIVATE_KEY`
- `SSH_PRIVATE_KEY`
- `PLATFORM_SSH_KNOWN_HOSTS`
For public workflow logs, prefer storing production host, SSH, remote path, Kubernetes, and other internal deployment values as Actions secrets, even when the workflows support same-named repository variables as a fallback.
## Optional variables
- `CLI_PUBLISH_LATEST_ENABLED`
- `CLI_INSTALLED_E2E_ENABLED`
- `CLI_E2E_DIST_REPO`
- `CLI_INSTALLED_E2E_DEFAULT_VERSION`
- `CLI_INSTALLED_E2E_DEFAULT_SUITE`
- `CLI_EMBEDDED_PUBLISH_BASE_URL`
- `CLI_EMBEDDED_PUBLISH_AUTH_KEY_ID`
- `PUBLIC_NPM_REPO`
- `PUBLIC_NPM_DEFAULT_BRANCH`
- `PUBLIC_SKILLS_REPO`
- `PUBLIC_SKILLS_DEFAULT_BRANCH`
- `HOMEBREW_TAP_REPO`
- `HOMEBREW_TAP_DEFAULT_BRANCH`
- `INSPECTION_SITE_BASE_URL`
- `INSPECTION_PLATFORM_BASE_URL`
- `OFFICE_CLI_LICENSE_BASE_URL`
- `OFFICE_CLI_LLM_MODEL`
- `OFFICE_CLI_LLM_REVIEW_MODEL`
- `PLATFORM_SERVER_HOST`
- `PLATFORM_SERVER_USER`
- `PLATFORM_SSH_PORT`
- `PLATFORM_REMOTE_WORKDIR`
- `PLATFORM_REMOTE_SITE_DIR`
- `PLATFORM_REMOTE_APP_DIR`
- `PLATFORM_REMOTE_ADMIN_DIR`
- `PLATFORM_KUBE_NAMESPACE`
- `PLATFORM_DEPLOYMENT_NAME`
- `PLATFORM_CONTAINER_NAME`
- `PLATFORM_IMAGE_REPO`
- `PLATFORM_SECRET_NAME`
- `PLATFORM_APP_ENV`
- `PLATFORM_SITE_BASE_URL`
- `PLATFORM_PLATFORM_BASE_URL`
- `PLATFORM_APP_SESSION_TTL`
- `PLATFORM_APP_SESSION_COOKIE_DOMAIN`
- `PLATFORM_PREVIEW_OBJECT_ENDPOINT`
- `PLATFORM_PREVIEW_OBJECT_BUCKET`
- `PLATFORM_PREVIEW_OBJECT_USE_SSL`
- `PLATFORM_OFFICESDK_HOST`
- `PLATFORM_OFFICESDK_ENDPOINT`