name: 'PR: Size Report' on: workflow_run: workflows: ['CI: Size Data'] types: - completed workflow_dispatch: inputs: pr_number: description: 'PR number to report on' required: true type: number run_id: description: 'Size data workflow run ID' required: true type: string permissions: contents: read pull-requests: write issues: write jobs: comment: runs-on: ubuntu-latest if: > github.repository == 'Comfy-Org/ComfyUI_frontend' && ( (github.event_name == 'workflow_run' && github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.conclusion == 'success') || github.event_name == 'workflow_dispatch' ) steps: - uses: actions/checkout@v6 - name: Setup frontend uses: ./.github/actions/setup-frontend - name: Download size data uses: dawidd6/action-download-artifact@0bd50d53a6d7fb5cb921e607957e9cc12b4ce392 # v12 with: name: size-data run_id: ${{ github.event_name == 'workflow_dispatch' && inputs.run_id || github.event.workflow_run.id }} path: temp/size - name: Resolve and validate PR metadata id: pr-meta uses: actions/github-script@v8 with: script: | const fs = require('fs'); // workflow_dispatch: validate artifact metadata against API-resolved PR if (context.eventName === 'workflow_dispatch') { const pullNumber = Number('${{ inputs.pr_number }}'); const { data: dispatchPr } = await github.rest.pulls.get({ owner: context.repo.owner, repo: context.repo.repo, pull_number: pullNumber, }); const artifactPr = Number(fs.readFileSync('temp/size/number.txt', 'utf8').trim()); const artifactBase = fs.readFileSync('temp/size/base.txt', 'utf8').trim(); if (artifactPr !== dispatchPr.number) { core.setFailed(`Artifact PR number (${artifactPr}) does not match dispatch PR (${dispatchPr.number}).`); return; } if (artifactBase !== dispatchPr.base.ref) { core.setFailed(`Artifact base (${artifactBase}) does not match dispatch PR base (${dispatchPr.base.ref}).`); return; } core.setOutput('number', String(dispatchPr.number)); core.setOutput('base', dispatchPr.base.ref); return; } // workflow_run: validate artifact metadata against trusted context const artifactPr = Number(fs.readFileSync('temp/size/number.txt', 'utf8').trim()); const artifactBase = fs.readFileSync('temp/size/base.txt', 'utf8').trim(); let pr = context.payload.workflow_run.pull_requests?.[0]; if (!pr) { const { data: prs } = await github.rest.repos.listPullRequestsAssociatedWithCommit({ owner: context.repo.owner, repo: context.repo.repo, commit_sha: context.payload.workflow_run.head_sha, }); pr = prs.find(p => p.state === 'open'); } if (!pr) { core.setFailed('Unable to resolve PR from workflow_run context.'); return; } if (Number(pr.number) !== artifactPr) { core.setFailed(`Artifact PR number (${artifactPr}) does not match trusted context (${pr.number}).`); return; } const trustedBase = pr.base?.ref; if (!trustedBase || artifactBase !== trustedBase) { core.setFailed(`Artifact base (${artifactBase}) does not match trusted context (${trustedBase}).`); return; } core.setOutput('number', String(pr.number)); core.setOutput('base', trustedBase); - name: Download previous size data uses: dawidd6/action-download-artifact@0bd50d53a6d7fb5cb921e607957e9cc12b4ce392 # v12 with: branch: ${{ steps.pr-meta.outputs.base }} workflow: ci-size-data.yaml event: push name: size-data path: temp/size-prev if_no_artifact_found: warn - name: Generate size report run: node scripts/size-report.js > size-report.md - name: Post PR comment uses: ./.github/actions/post-pr-report-comment with: pr-number: ${{ steps.pr-meta.outputs.number }} report-file: ./size-report.md comment-marker: '' token: ${{ secrets.GITHUB_TOKEN }}