ci: use CURSOR_PREFERRED_MODEL secret instead of hardcoded model#138
ci: use CURSOR_PREFERRED_MODEL secret instead of hardcoded model#138masnwilliams merged 1 commit intomainfrom
Conversation
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
| - If no actionable fix is possible, make no changes and post no comment | ||
| - PR comments must ONLY include the PR creation link, no manual merge instructions | ||
| " --model opus-4.5 --force --output-format=text | ||
| " --model ${{ secrets.CURSOR_PREFERRED_MODEL }} --force --output-format=text |
There was a problem hiding this comment.
Missing secret causes model flag to consume next argument
Medium Severity
If the CURSOR_PREFERRED_MODEL secret is not configured (or is empty), ${{ secrets.CURSOR_PREFERRED_MODEL }} resolves to an empty string. The shell would then parse --model --force, causing --force to be consumed as the model name. Unlike the other secrets in this workflow (which fail clearly at their respective steps), this would produce a confusing error from cursor-agent. Adding a default fallback like ${{ secrets.CURSOR_PREFERRED_MODEL || 'opus-4.5' }} would preserve the previous behavior when the secret is unset.
Summary
Replaces the hardcoded
--model opus-4.5in the cursor-agent CLI invocation in.github/workflows/fix-ci.yamlwith--model ${{ secrets.CURSOR_PREFERRED_MODEL }}, allowing the model to be configured via GitHub Actions secrets instead of requiring a code change.Note
Low Risk
Low risk workflow-only change that just swaps a hardcoded model name for a configurable secret; main risk is misconfiguration if the secret is unset or invalid.
Overview
Updates the
Fix CI FailuresGitHub Actions workflow to stop hardcoding thecursor-agent--modelvalue and instead read it from${{ secrets.CURSOR_PREFERRED_MODEL }}for configurable model selection without code changes.Written by Cursor Bugbot for commit c61cac1. This will update automatically on new commits. Configure here.