From b03fdc996ddb56e921975ded10aa7c8cfdaf222d Mon Sep 17 00:00:00 2001
From: Joshua Temple <joshua.temple@stablekernel.com>
Date: Sun, 5 Jul 2026 15:41:00 -0400
Subject: [PATCH] fix(fleet): install the rc from the cascade repo, not the
 example repo

fleet-repin runs inside each example repo's suite, where github.repository
is the example repo, but the cascade CLI release lives on stablekernel/cascade.
The install step downloaded from the example repo and failed with 'release not
found'. Add a cascade_repo input (default stablekernel/cascade) and download
from it; push, checkout, and read-back still target the example repo.

Signed-off-by: Joshua Temple <joshua.temple@stablekernel.com>
---
 .github/actions/fleet-repin/action.yaml | 20 +++++++++++++++-----
 1 file changed, 15 insertions(+), 5 deletions(-)

diff --git a/.github/actions/fleet-repin/action.yaml b/.github/actions/fleet-repin/action.yaml
index a742e64c..1c08dc0b 100644
--- a/.github/actions/fleet-repin/action.yaml
+++ b/.github/actions/fleet-repin/action.yaml
@@ -34,6 +34,13 @@ inputs:
       .github/workflows files onto a protected main, so it needs workflow scope
       in addition to contents write.
     required: true
+  cascade_repo:
+    description: >-
+      The repo that publishes the cascade CLI releases. The action installs the
+      dispatched rc from here, not from the example repo it runs in (the example
+      repos publish their own project releases, not the cascade binary).
+    required: false
+    default: 'stablekernel/cascade'
 
 runs:
   using: 'composite'
@@ -50,6 +57,7 @@ runs:
         GH_TOKEN: ${{ inputs.token }}
         REPIN_TOKEN: ${{ inputs.token }}
         SELF_REPO: ${{ github.repository }}
+        CASCADE_REPO: ${{ inputs.cascade_repo }}
       run: |
         set -euo pipefail
 
@@ -82,13 +90,15 @@ runs:
         # self-report comparison.
         RC_BARE="${RC_VERSION#v}"
 
-        # 3. Install the dispatched rc CLI from THIS repo and assert it reports
-        #    exactly the dispatched version BEFORE mutating anything. A bad or
-        #    unpublished rc tag reds here, not deep inside a scenario.
+        # 3. Install the dispatched rc CLI from the cascade repo and assert it
+        #    reports exactly the dispatched version BEFORE mutating anything. The
+        #    binary is published by cascade_repo, not by the example repo this
+        #    action runs in. A bad or unpublished rc tag reds here, not deep
+        #    inside a scenario.
         TMPDIR=$(mktemp -d)
-        echo "fleet-repin: downloading ${RC_VERSION} linux/amd64 archive from ${SELF_REPO}"
+        echo "fleet-repin: downloading ${RC_VERSION} linux/amd64 archive from ${CASCADE_REPO}"
         gh release download "$RC_VERSION" \
-          --repo "$SELF_REPO" \
+          --repo "$CASCADE_REPO" \
           --pattern '*linux_amd64*' \
           --dir "$TMPDIR"
         tar -xzf "$TMPDIR"/*.tar.gz -C "$TMPDIR"