fix: pin the E2E backend SHA in the frontend contract

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-10-22 13:01:49 +03:30
parent e3f0457dc9
commit bb29cc6bdb
3 changed files with 12 additions and 8 deletions
@@ -54,8 +54,9 @@ jobs:
      - name: Require pinned backend ref (SHA or tag)
        run: |
          if [ -z "${E2E_BACKEND_REF}" ]; then
-            echo "Set repository variable E2E_BACKEND_REF to a backend commit SHA. No fallback to main."
-            exit 1
+            E2E_BACKEND_REF="$(node -e "const c=require('./e2e/backend.contract.json'); const r=String(c.pinnedRef||''); if(!/^[0-9a-f]{40}$/i.test(r)){console.error('pinnedRef must be a full SHA'); process.exit(1)} process.stdout.write(r)")"
+            echo "E2E_BACKEND_REF=${E2E_BACKEND_REF}" >> "$GITHUB_ENV"
+            echo "Repository variable unset; using committed pinnedRef"
          fi
          echo "E2E_BACKEND_REF=${E2E_BACKEND_REF}"