ci: keep internal BOS URL on runner

Store the BOS package URL only in a local result file on the 017 runner and keep public workflow logs and notifications free of package URLs.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: Zachary-wW

.github/workflows/internal-ci.yml

@@ -167,12 +167,33 @@ jobs:
           BOS_PREFIX="${BOS_PATH_PREFIX%/}"
           BOS_PATH="$BOS_PREFIX/${{ steps.pr-info.outputs.safe_branch }}-${{ steps.pr-info.outputs.sha7 }}-${{ steps.pr-info.outputs.timestamp }}/LoongForge.tar.gz"
           OUTPUT_FILE="${{ steps.repack.outputs.output_file }}"
+          PR_NUM="${{ steps.pr-info.outputs.pr_num }}"
+          LOCAL_RUN_DIR=/home/users/weizhihao/loongforge-ci/runs
+          LOCAL_UPLOAD_LOG="$LOCAL_RUN_DIR/pr${PR_NUM}_upload.log"
 
-          bcecmd bos put "$OUTPUT_FILE" "bos:/$BOS_BUCKET/$BOS_PATH"
+          mkdir -p "$LOCAL_RUN_DIR"
+          chmod 700 "$LOCAL_RUN_DIR"
+          bcecmd bos put "$OUTPUT_FILE" "bos:/$BOS_BUCKET/$BOS_PATH" > "$LOCAL_UPLOAD_LOG" 2>&1
+          chmod 600 "$LOCAL_UPLOAD_LOG"
 
+          BRANCH="${{ steps.pr-info.outputs.branch }}"
+          SHA7="${{ steps.pr-info.outputs.sha7 }}"
+          TIMESTAMP="${{ steps.pr-info.outputs.timestamp }}"
           BOS_URL="https://$BOS_BUCKET.bj.bcebos.com/$BOS_PATH"
-          echo "bos_url=$BOS_URL" >> "$GITHUB_OUTPUT"
-          echo "Uploaded to: $BOS_URL"
+          LOCAL_RUN_FILE="$LOCAL_RUN_DIR/pr${PR_NUM}.json"
+
+          jq -n \
+            --argjson pr_number "$PR_NUM" \
+            --arg branch "$BRANCH" \
+            --arg sha7 "$SHA7" \
+            --arg timestamp "$TIMESTAMP" \
+            --arg bos_url "$BOS_URL" \
+            --arg updated_at "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
+            '{pr_number:$pr_number,branch:$branch,sha7:$sha7,timestamp:$timestamp,bos_url:$bos_url,updated_at:$updated_at}' \
+            > "$LOCAL_RUN_FILE"
+          chmod 600 "$LOCAL_RUN_FILE"
+
+          echo "Uploaded package metadata written to 017 local file: $LOCAL_RUN_FILE"
 
       - name: Write CI trigger signal
         run: |
@@ -185,20 +206,25 @@ jobs:
           BRANCH="${{ steps.pr-info.outputs.branch }}"
           SHA7="${{ steps.pr-info.outputs.sha7 }}"
           TIMESTAMP="${{ steps.pr-info.outputs.timestamp }}"
-          BOS_URL="${{ steps.upload.outputs.bos_url }}"
           BOS_PREFIX="${BOS_PATH_PREFIX%/}"
+          LOCAL_RUN_DIR=/home/users/weizhihao/loongforge-ci/runs
+          LOCAL_RUN_FILE="$LOCAL_RUN_DIR/pr${PR_NUM}.json"
+          LOCAL_SIGNAL_LOG="$LOCAL_RUN_DIR/pr${PR_NUM}_signal.log"
 
+          mkdir -p "$LOCAL_RUN_DIR"
+          chmod 700 "$LOCAL_RUN_DIR"
           jq -n \
             --argjson pr_number "$PR_NUM" \
             --arg branch "$BRANCH" \
             --arg sha7 "$SHA7" \
             --arg timestamp "$TIMESTAMP" \
-            --arg bos_url "$BOS_URL" \
+            --arg local_result_file "$LOCAL_RUN_FILE" \
             --arg updated_at "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
-            '{pr_number:$pr_number,branch:$branch,sha7:$sha7,timestamp:$timestamp,bos_url:$bos_url,status:"pending",updated_at:$updated_at}' \
+            '{pr_number:$pr_number,branch:$branch,sha7:$sha7,timestamp:$timestamp,local_result_file:$local_result_file,status:"pending",updated_at:$updated_at}' \
             > /tmp/ci_trigger.json
 
-          bcecmd bos put /tmp/ci_trigger.json "bos:/$BOS_BUCKET/$BOS_PREFIX/ci_trigger_pr${PR_NUM}.json"
+          bcecmd bos put /tmp/ci_trigger.json "bos:/$BOS_BUCKET/$BOS_PREFIX/ci_trigger_pr${PR_NUM}.json" > "$LOCAL_SIGNAL_LOG" 2>&1
+          chmod 600 "$LOCAL_SIGNAL_LOG"
 
           echo "CI trigger signal uploaded"
 
@@ -208,12 +234,12 @@ jobs:
           PR_NUM="${{ steps.pr-info.outputs.pr_num }}"
           BRANCH="${{ steps.pr-info.outputs.branch }}"
           SHA7="${{ steps.pr-info.outputs.sha7 }}"
-          BOS_URL="${{ steps.upload.outputs.bos_url }}"
           STATUS="打包上传成功"
+          LOCAL_RUN_FILE="/home/users/weizhihao/loongforge-ci/runs/pr${PR_NUM}.json"
 
-          if [ -z "$BOS_URL" ]; then
+          if [ "${{ steps.upload.outcome }}" != "success" ]; then
             STATUS="打包上传失败"
-            BOS_URL="N/A"
+            LOCAL_RUN_FILE="N/A"
           fi
 
           if [ -z "${RULIU_WEBHOOK:-}" ]; then
@@ -227,7 +253,7 @@ jobs:
           **Branch**: ${BRANCH:-N/A}
           **Commit**: ${SHA7:-N/A}
           **状态**: ${STATUS}
-          **BOS_URL**: ${BOS_URL}
+          **017 本机结果文件**: ${LOCAL_RUN_FILE}
 
           dodo 将自动触发内部流水线，请稍候...
           EOF