lightspeedwp
diff --git a/‎.github/workflows/ai-feedback-validation.yml‎
Lines changed: 17 additions & 17 deletions b/‎.github/workflows/ai-feedback-validation.yml‎
Lines changed: 17 additions & 17 deletions
diff --git a/‎scripts/workflows/__tests__/reusable-workflows.test.js‎
Lines changed: 8 additions & 3 deletions b/‎scripts/workflows/__tests__/reusable-workflows.test.js‎
Lines changed: 8 additions & 3 deletions
@@ -68,24 +68,24 @@ jobs:
               return;
             }
 
-            // Read FEEDBACK_RESPONSE.md from the PR head as data, never by
-            // checking out PR code. A fork's head repo may be gone (null).
+            // Read FEEDBACK_RESPONSE.md at the PR head commit as data, never
+            // by checking out PR code. The base repository serves fork head
+            // commits too, so this works for forks (even deleted ones) with a
+            // token scoped to the calling repository.
             let feedbackContent = null;
-            if (pr.head?.repo) {
-              try {
-                const { data } = await github.rest.repos.getContent({
-                  owner: pr.head.repo.owner.login,
-                  repo: pr.head.repo.name,
-                  path: 'FEEDBACK_RESPONSE.md',
-                  ref: pr.head.sha,
-                });
-                if (!Array.isArray(data) && data.content) {
-                  feedbackContent = Buffer.from(data.content, 'base64').toString('utf8');
-                }
-              } catch (error) {
-                if (error.status !== 404) {
-                  throw error;
-                }
+            try {
+              const { data } = await github.rest.repos.getContent({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                path: 'FEEDBACK_RESPONSE.md',
+                ref: pr.head.sha,
+              });
+              if (!Array.isArray(data) && data.content) {
+                feedbackContent = Buffer.from(data.content, 'base64').toString('utf8');
+              }
+            } catch (error) {
+              if (error.status !== 404) {
+                throw error;
               }
             }
 
 
@@ -224,15 +224,20 @@ describe('ai-feedback-validation.yml', () => {
     expect(core.warning).toHaveBeenCalledWith(expect.stringContaining('No permission to comment'));
   });
 
-  test('a fork whose head repository was deleted is treated as no feedback file', async () => {
-    const { github } = makeGithub();
+  test('a fork PR (even with its head repository deleted) is read through the base repository', async () => {
+    const { github } = makeGithub({ feedbackFile: VALID_FEEDBACK });
     const core = makeCore();
     const context = prContext({ body: 'Closes #7' });
     context.payload.pull_request.head.repo = null;
 
     await runScript(step, { github, context, core, env: { ENFORCE: 'true' } });
 
-    expect(github.rest.repos.getContent).not.toHaveBeenCalled();
+    expect(github.rest.repos.getContent).toHaveBeenCalledWith({
+      owner: 'lightspeedwp',
+      repo: 'example',
+      path: 'FEEDBACK_RESPONSE.md',
+      ref: 'abc123',
+    });
     expect(core.setFailed).not.toHaveBeenCalled();
   });
 });