debug: Add Upterm step in GHA to debug what's happening

[nightscape]

PR Type

enhancement

---

Description

• Introduced a new step in the CI workflow to set up an Upterm session for debugging purposes.
• Configured Upterm to limit access to the GitHub actor and specific users (nightscape).
• Standardized the quotation marks in the workflow file for consistency.

---

Changes walkthrough 📝

	Relevant files
Enhancement	ci.yml Add Upterm session setup to CI workflow                                    .github/workflows/ci.yml Added a new step to set up an Upterm session in the CI workflow. Configured Upterm with restricted access to specific users and the actor. Minor formatting changes to unify quotation marks in the workflow file. +7/-2

---

💡 PR-Agent usage: Comment /help "your question" on any pull request to receive relevant information

[github-actions]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 2 🔵🔵⚪⚪⚪

🧪 No relevant tests

🔒 Security concerns Potential security issue: The Upterm session setup could expose the CI environment to unauthorized access if the limit-access-to-actor or limit-access-to-users settings are misconfigured or bypassed. Verify that these settings are robust and tested.

⚡ Recommended focus areas for review Security Concern The addition of the Upterm session setup introduces potential security risks. Ensure that the limit-access-to-actor and limit-access-to-users configurations are strictly enforced and cannot be bypassed. Workflow Consistency The quotation marks for branches were standardized, but ensure that this change does not inadvertently affect branch matching behavior in the CI workflow.

[github-actions]

PR Code Suggestions ✨

Explore these optional code suggestions:

Category	Suggestion	Score
Security	Make the Upterm access restriction configurable to prevent hardcoding user access Ensure that the limit-access-to-users parameter in the Upterm setup step is dynamically configurable or includes all necessary users to avoid unintended access restrictions. .github/workflows/ci.yml [133] -limit-access-to-users: nightscape +limit-access-to-users: ${{ secrets.UPTERM_ALLOWED_USERS }} Suggestion importance[1-10]: 9 Why: The suggestion addresses a security concern by replacing a hardcoded user with a configurable secret, enhancing flexibility and reducing the risk of unauthorized access.	9
	Validate that Upterm session access is securely limited to the triggering actor Verify that the limit-access-to-actor parameter is correctly set to true to restrict session access to the triggering actor, ensuring secure debugging. .github/workflows/ci.yml [132] -limit-access-to-actor: true +limit-access-to-actor: ${{ secrets.UPTERM_LIMIT_TO_ACTOR }} Suggestion importance[1-10]: 7 Why: While the suggestion ensures secure session access, it is less impactful as the existing code already sets limit-access-to-actor to true. The proposed change adds configurability but is not as critical as the first suggestion.	7