mirror of
https://github.com/harvard-edge/cs249r_book.git
synced 2026-07-24 08:47:40 -05:00
The reviewer-identity spoof check tried base refs in the order (origin/main, origin/dev, HEAD~1) and returned the first that resolved. On dev, where origin/main is 132 commits behind origin/dev, this picked main and diffed every vault YAML changed since that point — sweeping up 100+ files unrelated to the current push and reporting each as a spoof-check failure. Fix: respect GITHUB_BASE_REF when set (PR mode), otherwise diff against HEAD~1 (push mode). This produces exactly the file set the check is meant to validate — what this PR or push is proposing — not the entire branch divergence from main. Verified locally on the codespell+codegen-hashes commit: now reports "no vault/questions/ changes in this PR" instead of 100+ spurious failures.