Skip to content

ci: use org variable for CURSOR_PREFERRED_MODEL #11

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rgarcia merged 5 commits into from
Jun 4, 2026
Merged

ci: use org variable for CURSOR_PREFERRED_MODEL #11

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
e64e09b
probe
rgarcia Jun 4, 2026
703bd5f
remove probe
rgarcia Jun 4, 2026
70e6f2d
ci: use org variable for CURSOR_PREFERRED_MODEL
rgarcia Jun 4, 2026
c38a1cb
ci: use org variable for CURSOR_PREFERRED_MODEL
rgarcia Jun 4, 2026
1c9e525
ci: use org variable for CURSOR_PREFERRED_MODEL
rgarcia Jun 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/semgrep.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -103,4 +103,4 @@ jobs:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
export CODEBASE_DESCRIPTION="${{ inputs.codebase-description }}"
curl -fsSL https://raw.githubusercontent.com/kernel/security-workflows/main/.github/workflows/semgrep-triage-prompt.md | envsubst '${GITHUB_REPOSITORY} ${CODEBASE_DESCRIPTION}' | agent -p --model ${{ secrets.CURSOR_PREFERRED_MODEL }} --force --output-format=text
curl -fsSL https://raw.githubusercontent.com/kernel/security-workflows/main/.github/workflows/semgrep-triage-prompt.md | envsubst '${GITHUB_REPOSITORY} ${CODEBASE_DESCRIPTION}' | agent -p --model ${{ vars.CURSOR_PREFERRED_MODEL }} --force --output-format=text
2 changes: 1 addition & 1 deletion .github/workflows/vuln-remediation.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -297,7 +297,7 @@ jobs:

if git diff --quiet; then
export DATE="$(date -u +%Y-%m-%d)"
curl -fsSL https://raw.githubusercontent.com/kernel/security-workflows/${{ inputs.security-workflows-ref }}/.github/workflows/vuln-remediation/fix-prompt.md | envsubst '${GITHUB_REPOSITORY} ${DATE}' | agent -p --model ${{ secrets.CURSOR_PREFERRED_MODEL }} --workspace . --trust --force --output-format=text
curl -fsSL https://raw.githubusercontent.com/kernel/security-workflows/${{ inputs.security-workflows-ref }}/.github/workflows/vuln-remediation/fix-prompt.md | envsubst '${GITHUB_REPOSITORY} ${DATE}' | agent -p --model ${{ vars.CURSOR_PREFERRED_MODEL }} --workspace . --trust --force --output-format=text
fi

- name: Validate remediation diff
Expand Down
7 changes: 6 additions & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -88,6 +88,11 @@ projectIgnorePaths:
Consumer repos need these secrets (set at org or repo level):

- `CURSOR_API_KEY` — for the triage/fix agents
- `CURSOR_PREFERRED_MODEL` — model for agent invocations
- `ADMIN_APP_ID` + `ADMIN_APP_PRIVATE_KEY` — GitHub App for write access
- `SOCKET_API_TOKEN` — Socket.dev API token

## Required variables

Consumer repos need these variables (set at org or repo level):

- `CURSOR_PREFERRED_MODEL` — model for agent invocations
Loading