From 353e64395a3376365fdd51ffd26ecfcf6260d095 Mon Sep 17 00:00:00 2001
From: arturfromtabnine <artur@tabnine.com>
Date: Fri, 15 May 2026 10:12:41 +0200
Subject: [PATCH] fix: move TABNINE_CLI_TRUST_WORKSPACE to the agent invocation
 step
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The env var was set on the `Authenticate GitHub CLI` step, which only
runs `gh auth login` — not the tabnine CLI. Step-level `env:` does not
flow to later steps in a composite action, so by the time the actual
`~/.local/bin/tabnine` invocation step ran, `TABNINE_CLI_TRUST_WORKSPACE`
was unset and the CLI exited with code 55:

> Tabnine CLI is not running in a trusted directory. To proceed, either
> use `--skip-trust`, set the `TABNINE_CLI_TRUST_WORKSPACE=true`
> environment variable, or trust this directory in interactive mode.

Move the env var onto the `${{ inputs.step_name }}` step (the one that
actually runs the CLI) and drop it from the gh auth step where it had
no effect.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 action.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/action.yml b/action.yml
index 313d513..c55bb11 100644
--- a/action.yml
+++ b/action.yml
@@ -130,7 +130,6 @@ runs:
       shell: bash
       env:
         GH_TOKEN_INPUT: ${{ inputs.github_token }}
-        TABNINE_CLI_TRUST_WORKSPACE: "true"
       run: |
         # Use a different env var name to avoid conflict with GITHUB_TOKEN
         echo "$GH_TOKEN_INPUT" | gh auth login --with-token
@@ -169,6 +168,7 @@ runs:
       env:
         TABNINE_TOKEN: ${{ inputs.TABNINE_KEY }}
         PROMPT_OVERRIDE: ${{ inputs.prompt_override }}
+        TABNINE_CLI_TRUST_WORKSPACE: "true"
       run: |
         if [ -z "$TABNINE_TOKEN" ]; then
           echo "Error: TABNINE_KEY is required"