From d5a81393dabc6c52c88dd6f37a5b30267b471022 Mon Sep 17 00:00:00 2001
From: hudsonaikins-crown <hudson.aikins@blanoire.co>
Date: Thu, 16 Jul 2026 20:07:52 -0700
Subject: [PATCH] fix: validate landed Tabellio commits

Entire-Checkpoint: 32fbf2c327b4
---
 .github/workflows/product-validation.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/product-validation.yml b/.github/workflows/product-validation.yml
index 6736be0..e86aeec 100644
--- a/.github/workflows/product-validation.yml
+++ b/.github/workflows/product-validation.yml
@@ -24,11 +24,15 @@ jobs:
       - name: Validate exact candidate
         run: |
           set -o pipefail
+          base_ref=origin/main
+          if [ "$GITHUB_EVENT_NAME" = "push" ]; then
+            base_ref=HEAD^
+          fi
           install -m 755 scripts/tabellio-validator.mjs "$RUNNER_TEMP/tabellio-validator"
           PATH="$RUNNER_TEMP:$PATH" node scripts/tabellio-validate.mjs gate \
             --repo . \
             --repo-id IntelIP/Tabellio \
-            --base origin/main \
+            --base "$base_ref" \
             --commit HEAD \
             --manifest tabellio.validation.json | tee tabellio-validation-result.json
       - name: Upload validation result