Conversation
Automated sync from stranske/Workflows Template hash: e3d5efdb2d70 Changes synced from sync-manifest.yml
stranske
added
sync
Contributor
Contributor
🤖 Keepalive Loop StatusPR #320 | Agent: Codex | Iteration 0/5 Current State
🔍 Failure Classification| Error type | infrastructure | |
Contributor
Keepalive Work Log (click to expand)
|
Contributor
There was a problem hiding this comment.
Pull request overview
Syncs this repo’s GitHub Actions workflows with the upstream stranske/Workflows templates, primarily standardizing on SHA-pinned action references and aligning orchestration workflows with the latest shared helpers.
Changes:
- Pin commonly used GitHub Actions (checkout/github-script/setup-*/artifact/etc.) to specific commit SHAs for supply-chain hardening and reproducibility.
- Update multiple agent automation workflows to the latest template versions (including consolidated PR event hubs / followups).
- Extend the opt-in Claude review workflow to checkout and use the shared API client + retry wrappers.
Reviewed changes
Copilot reviewed 29 out of 29 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/autofix.yml | Pin actions to SHAs for the autofix workflow. |
| .github/workflows/agents-pr-meta.yml | Pin github-script usage to a SHA. |
| .github/workflows/agents-issue-intake.yml | Pin github-script usage to a SHA. |
| .github/workflows/agents-80-pr-event-hub.yml | Pin actions to SHAs for consolidated PR event handling. |
| .github/workflows/agents-81-gate-followups.yml | Pin actions to SHAs; adjust sparse checkout to include shared helpers. |
| .github/workflows/agents-keepalive-loop.yml | Pin actions to SHAs across keepalive loop jobs. |
| .github/workflows/agents-keepalive-loop-reporter.yml | Pin actions to SHAs for keepalive reporting. |
| .github/workflows/agents-71-codex-belt-dispatcher.yml | Pin actions to SHAs for belt dispatcher. |
| .github/workflows/agents-72-codex-belt-worker.yml | Pin actions to SHAs for belt worker. |
| .github/workflows/agents-73-codex-belt-conveyor.yml | Pin actions to SHAs for belt conveyor. |
| .github/workflows/agents-autofix-loop.yml | Pin actions to SHAs across autofix loop jobs. |
| .github/workflows/agents-autofix-dispatcher.yml | Pin actions to SHAs for autofix dispatch bridge. |
| .github/workflows/agents-verifier.yml | Pin actions to SHAs for verifier. |
| .github/workflows/agents-bot-comment-handler.yml | Pin actions to SHAs for bot-comment handling. |
| .github/workflows/agents-issue-optimizer.yml | Pin actions to SHAs for issue optimizer. |
| .github/workflows/agents-verify-to-issue.yml | Pin actions to SHAs for verify→issue v1 workflow. |
| .github/workflows/agents-verify-to-issue-v2.yml | Pin actions to SHAs for verify→issue v2 workflow. |
| .github/workflows/agents-verify-to-new-pr.yml | Pin actions to SHAs for verify→new PR workflow. |
| .github/workflows/agents-auto-label.yml | Pin actions to SHAs for auto-labeling. |
| .github/workflows/agents-capability-check.yml | Pin actions to SHAs for capability check. |
| .github/workflows/agents-decompose.yml | Pin actions to SHAs for task decomposition. |
| .github/workflows/agents-dedup.yml | Pin actions to SHAs for duplicate detection. |
| .github/workflows/agents-guard.yml | Pin actions (and remote action refs) to SHAs for guard enforcement. |
| .github/workflows/agents-auto-pilot.yml | Pin actions to SHAs throughout the auto-pilot orchestrator. |
| .github/workflows/agents-weekly-metrics.yml | Pin actions to SHAs for weekly metrics aggregation/upload. |
| .github/workflows/maint-coverage-guard.yml | Pin actions to SHAs for the coverage guard workflow. |
| .github/workflows/maint-76-claude-code-review.yml | Add checkout + shared API client setup; pin actions to SHAs. |
| .github/workflows/dependabot-automerge.yml | Pin actions to SHAs for dependabot auto-merge flow. |
| .github/workflows/reusable-pr-context.yml | Pin actions to SHAs in reusable PR context fetcher. |
Comments suppressed due to low confidence (1)
.github/workflows/maint-coverage-guard.yml:126
- In
guardjob, the secondactions/checkoutusessparse-checkoutwithout apath. Running checkout twice in the same workspace will update the working tree to the sparse set and can remove the rest of the repo, so the laterpython tools/coverage_guard.py(and baseline config reads) may fail because those files are no longer present. Consider either (a) removing the second checkout and instead passing the App token to the initial full checkout, or (b) checking out the retry helpers into a separatepath:so it doesn't overwrite the main workspace.
- name: Checkout repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- name: Checkout retry helpers
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
with:
token: ${{ steps.app_token.outputs.token || github.token }}
sparse-checkout: |
You can also share your feedback on Copilot code review. Take the survey.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Sync Summary
Files Updated
Files Skipped
Review Checklist
Source: stranske/Workflows
Manifest:
.github/sync-manifest.yml