chore: sync rc-revert.yml from Template-Joomla [skip ci]

chore: sync pre-release.yml from Template-Joomla [skip ci]
chore: sync pr-metadata-check.yml from Template-Joomla [skip ci]
2026-07-17 03:52:43 +00:00 · 2026-07-17 03:52:42 +00:00 · 2026-07-17 03:52:41 +00:00 · 2026-07-17 03:52:40 +00:00 · 2026-07-17 03:52:38 +00:00 · 2026-07-17 03:52:37 +00:00
11 changed files with 32 additions and 25 deletions
@@ -22,7 +22,7 @@ on:

 env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-  MOKOGIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  MOKOGIT_URL: ${{ vars.MOKOGIT_URL || 'https://git.mokoconsulting.tech' }}

 permissions:
  contents: write
@@ -52,9 +52,9 @@ on:

 env:
  FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
-  MOKOGIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-  GIT_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
-  GIT_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
+  MOKOGIT_URL: ${{ vars.MOKOGIT_URL || 'https://git.mokoconsulting.tech' }}
+  GIT_ORG: ${{ vars.MOKOGIT_ORG || github.repository_owner }}
+  GIT_REPO: ${{ vars.MOKOGIT_REPO || github.event.repository.name }}

 permissions:
  contents: write
@@ -36,7 +36,7 @@ jobs:
        env:
          MOKOGIT_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
          REPO: ${{ github.repository }}
-          API_BASE: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+          API_BASE: ${{ vars.MOKOGIT_URL || 'https://git.mokoconsulting.tech' }}
          BRANCH: ${{ github.event.pull_request.head.ref }}
        run: |
          set -euo pipefail
@@ -44,7 +44,7 @@ jobs:
      - name: Force dev to main
        env:
          TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
-          SERVER: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+          SERVER: ${{ vars.MOKOGIT_URL || 'https://git.mokoconsulting.tech' }}
          REPO: ${{ github.repository }}
        run: |
          set -euo pipefail
@@ -5,10 +5,10 @@
 # FILE INFORMATION
 # DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.Universal
-# REPO: https://git.mokoconsulting.tech/MokoConsulting/mokocli
+# REPO: https://git.mokoconsulting.tech/MokoConsulting/Template-Generic
 # PATH: /.mokogit/workflows/ci-issue-reporter.yml
 # VERSION: 01.00.00
-# BRIEF: Reusable workflow — creates/updates a MokoGIT issue when a CI gate fails.
+# BRIEF: Reusable workflow � creates/updates a MokoGIT issue when a CI gate fails.
 #        Clones MokoCLI and runs cli/ci_issue_reporter.sh.

 name: "Universal: CI Issue Reporter"
@@ -50,19 +50,26 @@ jobs:
      - name: Clone MokoCLI
        env:
          MOKOGIT_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
+          MOKOGIT_URL: ${{ vars.MOKOGIT_URL || 'https://git.mokoconsulting.tech' }}
        run: |
-          MOKOGIT_URL="${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}"
          git clone --depth 1 --filter=blob:none --sparse "${MOKOGIT_URL}/MokoConsulting/mokocli.git" /tmp/mokocli
          cd /tmp/mokocli && git sparse-checkout set cli/ci_issue_reporter.sh

      - name: Report CI failure
        env:
          MOKOGIT_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
-          MOKOGIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+          MOKOGIT_URL: ${{ vars.MOKOGIT_URL || 'https://git.mokoconsulting.tech' }}
+          # Route all workflow_call inputs through env vars — referencing ${{ inputs.* }}
+          # directly in a run: block interpolates at YAML-parse time and is a shell-injection
+          # vector. Shell variables are not re-parsed, so a crafted input can't break out.
+          INPUT_GATE: ${{ inputs.gate }}
+          INPUT_DETAILS: ${{ inputs.details }}
+          INPUT_SEVERITY: ${{ inputs.severity }}
+          INPUT_WORKFLOW: ${{ inputs.workflow }}
        run: |
          chmod +x /tmp/mokocli/cli/ci_issue_reporter.sh
          /tmp/mokocli/cli/ci_issue_reporter.sh \
-            --gate "${{ inputs.gate }}" \
-            --details "${{ inputs.details }}" \
-            --severity "${{ inputs.severity }}" \
-            --workflow "${{ inputs.workflow }}"
+            --gate "$INPUT_GATE" \
+            --details "$INPUT_DETAILS" \
+            --severity "$INPUT_SEVERITY" \
+            --workflow "$INPUT_WORKFLOW"
@@ -21,7 +21,7 @@ permissions:
  contents: write

 env:
-  MOKOGIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  MOKOGIT_URL: ${{ vars.MOKOGIT_URL || 'https://git.mokoconsulting.tech' }}

 jobs:
  cleanup:
@@ -5,7 +5,7 @@
 # FILE INFORMATION
 # DEFGROUP: MokoGIT.Workflow
 # INGROUP: MokoCLI.Automation
-# VERSION: 02.67.00
+# VERSION: 01.00.00
 # BRIEF: Auto-create feature branch when an issue is opened

 name: "Universal: Issue Branch"
@@ -19,7 +19,7 @@ permissions:
  issues: write

 env:
-  MOKOGIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+  MOKOGIT_URL: ${{ vars.MOKOGIT_URL || 'https://git.mokoconsulting.tech' }}

 jobs:
  create-branch:
@@ -505,7 +505,7 @@ jobs:
          MOKOGIT_TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
          REPO: ${{ github.repository }}
          BRANCH: ${{ github.head_ref }}
-          MOKOGIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+          MOKOGIT_URL: ${{ vars.MOKOGIT_URL || 'https://git.mokoconsulting.tech' }}
        run: |
          curl -s -X POST             "${MOKOGIT_URL}/api/v1/repos/${REPO}/actions/workflows/pre-release.yml/dispatches"             -H "Authorization: token ${MOKOGIT_TOKEN}"             -H "Content-Type: application/json"             -d "{\"ref\":\"${BRANCH}\",\"inputs\":{\"stability\":\"release-candidate\"}}"
          echo "### Pre-Release" >> $GITHUB_STEP_SUMMARY
@@ -20,9 +20,9 @@ permissions:
  contents: read

 env:
-  MOKOGIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-  GIT_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
-  GIT_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
+  MOKOGIT_URL: ${{ vars.MOKOGIT_URL || 'https://git.mokoconsulting.tech' }}
+  GIT_ORG: ${{ vars.MOKOGIT_ORG || github.repository_owner }}
+  GIT_REPO: ${{ vars.MOKOGIT_REPO || github.event.repository.name }}

 jobs:
  validate-metadata:
@@ -40,9 +40,9 @@ permissions:
  contents: write

 env:
-  GIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
-  GIT_ORG: ${{ vars.GITEA_ORG || github.repository_owner }}
-  GIT_REPO: ${{ vars.GITEA_REPO || github.event.repository.name }}
+  GIT_URL: ${{ vars.MOKOGIT_URL || 'https://git.mokoconsulting.tech' }}
+  GIT_ORG: ${{ vars.MOKOGIT_ORG || github.repository_owner }}
+  GIT_REPO: ${{ vars.MOKOGIT_REPO || github.event.repository.name }}

 jobs:
  build:
@@ -32,7 +32,7 @@ jobs:
        env:
          BRANCH: ${{ github.event.pull_request.head.ref }}
          REPO: ${{ github.repository }}
-          GIT_URL: ${{ vars.GITEA_URL || 'https://git.mokoconsulting.tech' }}
+          GIT_URL: ${{ vars.MOKOGIT_URL || 'https://git.mokoconsulting.tech' }}
          TOKEN: ${{ secrets.MOKOGIT_TOKEN }}
        run: |
          set -euo pipefail
Author	SHA1	Message	Date
jmiller	118d455924	chore: sync rc-revert.yml from Template-Joomla [skip ci]	2026-07-17 03:52:43 +00:00
jmiller	1b6c06d441	chore: sync pre-release.yml from Template-Joomla [skip ci]	2026-07-17 03:52:42 +00:00
jmiller	b0ccd79011	chore: sync pr-metadata-check.yml from Template-Joomla [skip ci]	2026-07-17 03:52:41 +00:00
jmiller	7963fe2f9a	chore: sync pr-check.yml from Template-Joomla [skip ci]	2026-07-17 03:52:40 +00:00
jmiller	79340bdb15	chore: sync issue-branch.yml from Template-Joomla [skip ci]	2026-07-17 03:52:38 +00:00
jmiller	534a7fb16a	chore: sync cleanup.yml from Template-Joomla [skip ci]	2026-07-17 03:52:37 +00:00
jmiller	46cfe3ed1d	chore: sync ci-issue-reporter.yml from Template-Joomla [skip ci]	2026-07-17 03:52:35 +00:00
jmiller	e8d141ed97	chore: sync cascade-dev.yml from Template-Joomla [skip ci]	2026-07-17 03:52:34 +00:00
jmiller	374cfd45a7	chore: sync branch-cleanup.yml from Template-Joomla [skip ci]	2026-07-17 03:52:33 +00:00
jmiller	fb8a58e181	chore: sync auto-release.yml from Template-Joomla [skip ci]	2026-07-17 03:52:32 +00:00
jmiller	db7de42c95	chore: sync auto-bump.yml from Template-Joomla [skip ci]	2026-07-17 03:52:30 +00:00