mirror of
https://github.com/deepseek-ai/deepseek-harness
synced 2026-08-15 21:04:50 +00:00
9caaa6c95e
Adds .github/workflows/e2e.yml, which runs `pnpm run test:e2e` against the external DeepSeek API (https://api.deepseek.com) using a DEEPSEEK_API_KEY repo secret. ci.yml stays keyless/forkable; this is a separate, secret-consuming workflow that fills the gap of nothing in CI exercising the with-key suites. - Triggers: workflow_dispatch + push to main/master + nightly schedule + pull_request. A job-level `if:` skips untrusted PRs (forks + Dependabot, both keyless), keying the Dependabot test on the PR author (pull_request.user.login) not github.actor. A job-level skip reports as success, so this is safe as a required check. - Unconditional preflight hard-fails on a missing secret so the self-skipping suite can't report a false green when the key is misconfigured. - Secret scoped to the preflight + e2e steps only; permissions: contents: read; DEEPSEEK_BASE_URL pinned to the external API; single Node 24; timeout 45m; cancel-in-progress only for PR runs. Plan converged with Codex (gpt-5.5:xhigh) over 3 review rounds.