Skip to content

chore: sync repository quality assets #226

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
github-actions merged 1 commit into from
Aug 21, 2026
Merged

chore: sync repository quality assets #226

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 34 additions & 4 deletions .github/workflows/codex-copilot-remediation.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,8 @@ jobs:
pr="$(gh api "repos/${REPOSITORY}/pulls/${PR_NUMBER}")"
test "$(jq -r .state <<<"${pr}")" = open
test "$(jq -r .draft <<<"${pr}")" = false
test "$(jq -r .base.ref <<<"${pr}")" = develop
base_ref="$(jq -er '.base.ref | select(. == "develop" or . == "main")' \
<<<"${pr}")"
test "$(jq -r .head.repo.full_name <<<"${pr}")" = "${REPOSITORY}"
author="$(jq -r .user.login <<<"${pr}")"
if [ "${author}" = 'lightning-it-release-automation[bot]' ]; then
Expand Down Expand Up @@ -96,9 +97,33 @@ jobs:
fi
gh api --method POST "repos/${REPOSITORY}/issues/${PR_NUMBER}/comments" \
-f body="${marker}" >/dev/null
request_response=""
request_status=0
gh api --method POST "repos/${REPOSITORY}/pulls/${PR_NUMBER}/requested_reviewers" \
-f 'reviewers[]=copilot-pull-request-reviewer[bot]' >/dev/null || request_status=$?
request_response="$(
gh api --method POST "repos/${REPOSITORY}/pulls/${PR_NUMBER}/requested_reviewers" \
-f "reviewers[]=${COPILOT_LOGIN}"
)" || request_status=$?
if [ "${request_status}" -eq 0 ]; then
if jq -e \
--argjson number "${PR_NUMBER}" \
--arg repository "${REPOSITORY}" \
--arg base_ref "${base_ref}" \
--arg head "${EXPECTED_HEAD}" \
'(.number | type) == "number"
and .number == $number
and .state == "open"
and .draft == false
and .base.repo.full_name == $repository
and .base.ref == $base_ref
and .head.repo.full_name == $repository
and .head.sha == $head' \
<<<"${request_response}" >/dev/null; then
echo "The one permitted exact-head Copilot review request was accepted and bound."
exit 0
fi
echo "Copilot request returned success without the expected open PR, base, head, and repository bindings; the consumed marker forbids an automatic retry." >&2
exit 1
fi
pr="$(gh api "repos/${REPOSITORY}/pulls/${PR_NUMBER}")"
reviews="$(gh api --paginate --slurp "repos/${REPOSITORY}/pulls/${PR_NUMBER}/reviews?per_page=100")"
if jq -e --arg login "${COPILOT_LOGIN}" --arg head "${EXPECTED_HEAD}" \
Expand Down Expand Up @@ -155,7 +180,8 @@ jobs:
pr="$(gh api "repos/${REPOSITORY}/pulls/${pr_number}")"
test "$(jq -r .state <<<"${pr}")" = open
test "$(jq -r .draft <<<"${pr}")" = false
test "$(jq -r .base.ref <<<"${pr}")" = develop
base_ref="$(jq -er '.base.ref | select(. == "develop" or . == "main")' \
<<<"${pr}")"
test "$(jq -r .head.repo.full_name <<<"${pr}")" = "${REPOSITORY}"
test "$(jq -r .head.label <<<"${pr}")" != null
head_sha="$(jq -r .head.sha <<<"${pr}")"
Expand All @@ -173,6 +199,10 @@ jobs:
echo "Ignoring stale Copilot review for ${reviewed_sha}; current head is ${head_sha}."
exit 0
fi
if [ "${base_ref}" = "main" ]; then
echo "Main promotion reviews are verified by the protected current-revision gate; in-place remediation and auto-merge remain disabled."
exit 0
fi

review_body="$(jq -r '.review.body // "" | ascii_downcase' "${GITHUB_EVENT_PATH}")"
if [[ "${review_body}" == *"unable to review"* || "${review_body}" == *"not able to review"* || "${review_body}" == *"quota exhausted"* || "${review_body}" == *"quota exceeded"* ]]; then
Expand Down
Loading