Skip to content

Commit 07f325e

Browse files
authored
Replace dangerous workflow_run trigger with secure workflow_call in smoke-detector (#3129)
1 parent 1d63c9e commit 07f325e

13 files changed

Lines changed: 500 additions & 94 deletions

.github/workflows/smoke-claude.lock.yml

Lines changed: 19 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.github/workflows/smoke-claude.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,22 @@ safe-outputs:
2020
create-issue:
2121
timeout_minutes: 10
2222
strict: true
23+
jobs:
24+
investigate-on-failure:
25+
if: failure()
26+
needs: agent
27+
uses: ./.github/workflows/smoke-detector.lock.yml
28+
permissions:
29+
contents: read
30+
pull-requests: read
31+
actions: read
32+
with:
33+
workflow_name: Smoke Claude
34+
run_id: ${{ github.run_id }}
35+
run_number: ${{ github.run_number }}
36+
conclusion: failure
37+
html_url: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
38+
head_sha: ${{ github.sha }}
2339
---
2440

2541
Review the last 5 merged pull requests in this repository and post summary in an issue.

.github/workflows/smoke-codex.lock.yml

Lines changed: 19 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.github/workflows/smoke-codex.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,22 @@ safe-outputs:
1919
create-issue:
2020
timeout_minutes: 10
2121
strict: true
22+
jobs:
23+
investigate-on-failure:
24+
if: failure()
25+
needs: agent
26+
uses: ./.github/workflows/smoke-detector.lock.yml
27+
permissions:
28+
contents: read
29+
pull-requests: read
30+
actions: read
31+
with:
32+
workflow_name: Smoke Codex
33+
run_id: ${{ github.run_id }}
34+
run_number: ${{ github.run_number }}
35+
conclusion: failure
36+
html_url: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
37+
head_sha: ${{ github.sha }}
2238
---
2339

2440
Review the last 5 merged pull requests in this repository and post summary in an issue.

.github/workflows/smoke-copilot.lock.yml

Lines changed: 19 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

.github/workflows/smoke-copilot.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,22 @@ safe-outputs:
2323
create-issue:
2424
timeout_minutes: 10
2525
strict: true
26+
jobs:
27+
investigate-on-failure:
28+
if: failure()
29+
needs: agent
30+
uses: ./.github/workflows/smoke-detector.lock.yml
31+
permissions:
32+
contents: read
33+
pull-requests: read
34+
actions: read
35+
with:
36+
workflow_name: Smoke Copilot
37+
run_id: ${{ github.run_id }}
38+
run_number: ${{ github.run_number }}
39+
conclusion: failure
40+
html_url: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
41+
head_sha: ${{ github.sha }}
2642
---
2743

2844
Review the last 5 merged pull requests in this repository and post summary in an issue.

0 commit comments

Comments
 (0)