fix: unbreak Bonk - #151
Draft
andre-j3sus wants to merge 1 commit into
Draft
Conversation
![ask-bonk[bot]](https://avatars.githubusercontent.com/in/2454580?s=60&v=4){kind=small}
| # 1.15.13 reported nothing at all when the model call failed, which | ||
| # hid this breakage for three weeks. The dev build is what workerd | ||
| # runs against these models. | ||
| opencode_dev: true |
There was a problem hiding this comment.
opencode_dev: true makes the action run bun install -g opencode-ai@dev, so every privileged review run downloads an unpinned moving build with access to the gateway credentials. This negates the SHA pin above and permits a compromised dev publish to exfiltrate those secrets. Use a reviewed immutable OpenCode release instead (or pin the exact package artifact/version) before enabling this workflow.
|
Changes Bonk to GPT-5.6-terra, pins the action SHA, adds runtime guardrails, and documents the setup. Submitted 1 inline security finding: the unpinned |
Bonk has posted nothing since 2026-08-18. Three faults stacked: OpenCode 1.15.13 reported nothing on failure, hiding the rest; claude-opus-4-8 is not a valid model id; and the gateway's upstream Anthropic key is invalid, so every anthropic/* model fails auth regardless. Moves to gpt-5.6-terra with variant: high on the dev build, matching workerd. Not the larger sol, which returns 400 for function tools whenever reasoning_effort is set — fatal for a reviewer that reads files, and why sol has no working run anywhere in the org.
andre-j3sus
force-pushed
the
ajesus/test-bonk-gpt
branch
from
August 25, 2026 07:31
319ed03 to
62fefe2
Compare
andre-j3sus
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bonk has posted nothing since 2026-08-18. Three faults stacked, each hiding the
next: OpenCode 1.15.13 reported nothing at all on failure,
claude-opus-4-8isnot a valid model id, and the gateway's upstream Anthropic key is invalid, so
every
anthropic/*model fails auth regardless of id.Moves to
gpt-5.6-terrawithvariant: high, matching workerd. Not the largergpt-5.6-sol, which returns 400 for function tools wheneverreasoning_effortis set — fatal for a reviewer that reads files, and why sol has no working run
anywhere in the org.