template/.github/workflows/pullfrog.yml at main · pullfrog/template · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
# PULLFROG ACTION — DO NOT EDIT EXCEPT WHERE INDICATED
# reads branch from .branch file and builds action from that branch
# pullfrog-sync: uses=./.pullfrog-action/action
name: Pullfrog
run-name: ${{ inputs.name || github.workflow }}
on:
  workflow_dispatch:
    inputs:
      prompt:
        type: string
        description: Agent prompt
      name:
        type: string
        description: Run name

permissions:
  id-token: write
  contents: write
  pull-requests: write
  issues: write
  actions: read
  checks: read

jobs:
  pullfrog:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v6
        with:
          fetch-depth: 1

      # pullfrog-sync: prepare-start
      - name: Get installation token
        id: token
        uses: pullfrog/pullfrog/get-installation-token@main
        with:
          repos: app

      - name: Read branch
        id: config
        run: |
          if [ -f .branch ]; then
            echo "branch=$(cat .branch)" >> $GITHUB_OUTPUT
          else
            echo "branch=main" >> $GITHUB_OUTPUT
          fi

      - name: Checkout pullfrog/app action
        run: |
          for i in 1 2 3; do
            git clone --depth 1 --branch "${{ steps.config.outputs.branch }}" \
              "https://x-access-token:${{ steps.token.outputs.token }}@github.com/pullfrog/app.git" \
              /tmp/pullfrog-app && break
            echo "Clone attempt $i failed, retrying in 5s..."
            sleep 5
          done
          echo "Checked out pullfrog/app at $(git -C /tmp/pullfrog-app rev-parse HEAD)"

      - uses: pnpm/action-setup@v4
        with:
          version: 10

      - uses: actions/setup-node@v4
        with:
          node-version: '24'

      - name: Build action
        working-directory: /tmp/pullfrog-app/action
        run: |
          pnpm install --frozen-lockfile
          pnpm build

      - name: Copy built action to workspace
        run: |
          rm -rf .pullfrog-action
          mkdir -p .pullfrog-action
          cp -r /tmp/pullfrog-app/action .pullfrog-action/action

      # pullfrog-sync: prepare-end
      - name: Run agent
        uses: ./.pullfrog-action/action
        with:
          prompt: ${{ inputs.prompt }}
        env:
          # force local action execution so the PR branch's source is exercised
          # instead of the published npm fallback (see AGENTS.md, wiki/preview-repo.md)
          PULLFROG_FORCE_LOCAL_CLI: "1"
          API_URL: ${{ secrets.API_URL }}
          VERCEL_AUTOMATION_BYPASS_SECRET: ${{ secrets.VERCEL_AUTOMATION_BYPASS_SECRET }}
          # add any additional keys your agent(s) need
          # optionally, comment out any you won't use
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
          GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
          GEMINI_API_KEY: ${{ secrets.GEMINI_API_KEY }}
          CURSOR_API_KEY: ${{ secrets.CURSOR_API_KEY }}
          MISTRAL_API_KEY: ${{ secrets.MISTRAL_API_KEY }}
          GROQ_API_KEY: ${{ secrets.GROQ_API_KEY }}
          DEEPSEEK_API_KEY: ${{ secrets.DEEPSEEK_API_KEY }}
          OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
          # Amazon Bedrock — bearer token inherited from pullfrog org secrets
          # (visibility: all). region + model id are non-sensitive config and
          # default to Opus 4.6 (US); override per preview repo via
          # `gh variable set <NAME> -R pullfrog/preview-<PR>-<branch>` when
          # testing other regions or model ids. see https://docs.pullfrog.com/bedrock.
          AWS_BEARER_TOKEN_BEDROCK: ${{ secrets.AWS_BEARER_TOKEN_BEDROCK }}
          AWS_REGION: ${{ vars.AWS_REGION || 'us-east-1' }}
          BEDROCK_MODEL_ID: ${{ vars.BEDROCK_MODEL_ID || 'us.anthropic.claude-opus-4-6-v1' }}
          # escape hatches for ad-hoc e2e overrides via repo Actions variables
          PULLFROG_MODEL: ${{ vars.PULLFROG_MODEL }}
          PULLFROG_AGENT: ${{ vars.PULLFROG_AGENT }}