fix(tokenless): fix tokenless with push event

[gregberge]

Fix #306

[linear]

ARG-354

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
argos-js-sdk-reference	Ready	Preview, Comment	May 21, 2026 1:07pm

[Copilot]

Pull request overview

This pull request fixes GitHub Actions “tokenless” authentication for non-PR workflows (e.g. push events) by allowing the token exchange to use the build commit when prHeadCommit isn’t available, and updates the test mocking utilities accordingly.

Changes:

• Relax tokenless availability detection for GitHub Actions and send commit = prHeadCommit ?? commit to the tokenless exchange endpoint.
• Update tokenless auth tests to use commit in the base config (but some downstream assertions still assume prHeadCommit is required).
• Rename the MSW OIDC mock server helpers to a more general “token exchange” server and update references.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
packages/core/src/github-actions-tokenless.ts	Use prHeadCommit when present, otherwise fall back to commit for tokenless exchange; simplify availability check.
packages/core/src/github-actions-tokenless.test.ts	Switch test base config to commit-based setup and remove tokenless availability tests (but leaves inconsistent expectations later in the file).
packages/core/src/github-actions-oidc.test.ts	Update to the renamed mock server helper.
packages/core/src/auth.test.ts	Update to the renamed mock server helper.
packages/core/mocks/oidc.ts	Rename and generalize MSW handlers/server from OIDC-only to token exchange helpers.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.