Skip to content
This repository was archived by the owner on Mar 18, 2026. It is now read-only.

chore: add agentic workflows#102

Merged
javdl merged 1 commit into
mainfrom
codex/agentic-workflows
Mar 11, 2026
Merged

chore: add agentic workflows#102
javdl merged 1 commit into
mainfrom
codex/agentic-workflows

Conversation

@javdl
Copy link
Copy Markdown
Contributor

@javdl javdl commented Mar 11, 2026

Summary

Adds GitHub Agentic Workflows (gh-aw) for the developer documentation portal:

  • daily-repo-status — daily summary of repo activity (issues, PRs, releases)
  • q — interactive chatops via /q comment
  • pr-fix — on-demand PR fixing via /pr-fix comment
  • daily-qa — daily quality assurance: validates builds, tests, code structure
  • daily-doc-updater — automatically reviews and updates documentation based on recent code changes

Configuration

  • .gitattributes added with linguist-generated=true merge=ours for *.lock.yml

Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8fbc043b00

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

GH_AW_ALLOWED_DOMAINS: "api.business.githubcopilot.com,api.enterprise.githubcopilot.com,api.github.com,api.githubcopilot.com,api.individual.githubcopilot.com,api.snapcraft.io,archive.ubuntu.com,azure.archive.ubuntu.com,crl.geotrust.com,crl.globalsign.com,crl.identrust.com,crl.sectigo.com,crl.thawte.com,crl.usertrust.com,crl.verisign.com,crl3.digicert.com,crl4.digicert.com,crls.ssl.com,github.com,host.docker.internal,json-schema.org,json.schemastore.org,keyserver.ubuntu.com,ocsp.digicert.com,ocsp.geotrust.com,ocsp.globalsign.com,ocsp.identrust.com,ocsp.sectigo.com,ocsp.ssl.com,ocsp.thawte.com,ocsp.usertrust.com,ocsp.verisign.com,packagecloud.io,packages.cloud.google.com,packages.microsoft.com,ppa.launchpad.net,raw.githubusercontent.com,registry.npmjs.org,s.symcb.com,s.symcd.com,security.ubuntu.com,telemetry.enterprise.githubcopilot.com,ts-crl.ws.symantec.com,ts-ocsp.ws.symantec.com"
GITHUB_SERVER_URL: ${{ github.server_url }}
GITHUB_API_URL: ${{ github.api_url }}
GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"add_comment\":{\"max\":1},\"create_pull_request\":{\"draft\":false,\"if_no_changes\":\"ignore\",\"labels\":[\"automation\",\"workflow-optimization\"],\"max\":1,\"max_patch_size\":1024,\"protected_files\":[\"package.json\",\"bun.lockb\",\"bunfig.toml\",\"deno.json\",\"deno.jsonc\",\"deno.lock\",\"global.json\",\"NuGet.Config\",\"Directory.Packages.props\",\"mix.exs\",\"mix.lock\",\"go.mod\",\"go.sum\",\"stack.yaml\",\"stack.yaml.lock\",\"pom.xml\",\"build.gradle\",\"build.gradle.kts\",\"settings.gradle\",\"settings.gradle.kts\",\"gradle.properties\",\"package-lock.json\",\"yarn.lock\",\"pnpm-lock.yaml\",\"npm-shrinkwrap.json\",\"requirements.txt\",\"Pipfile\",\"Pipfile.lock\",\"pyproject.toml\",\"setup.py\",\"setup.cfg\",\"Gemfile\",\"Gemfile.lock\",\"uv.lock\",\"AGENTS.md\"],\"protected_path_prefixes\":[\".github/\",\".agents/\"],\"title_prefix\":\"[q] \"},\"missing_data\":{},\"missing_tool\":{}}"
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Allow q workflow to edit .github/workflows in PR output

Q - Agentic Workflow Optimizer is explicitly instructed to propose workflow-file changes (see .github/workflows/q.md, including “modified workflow files” and compile/validate steps), but this handler config blocks any PR patch under .github/ via "protected_path_prefixes":[".github/",".agents/"]. In this repo the target files live in .github/workflows/, so whenever the agent makes the intended optimization changes, create_pull_request will be rejected and the workflow cannot complete its primary function.

Useful? React with 👍 / 👎.

@javdl javdl force-pushed the codex/agentic-workflows branch from 8fbc043 to 1bc32dc Compare March 11, 2026 22:29
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1bc32dcd3a

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

mkdir -p /tmp/gh-aw/safeoutputs
mkdir -p /tmp/gh-aw/mcp-logs/safeoutputs
cat > /opt/gh-aw/safeoutputs/config.json << 'GH_AW_SAFE_OUTPUTS_CONFIG_EOF'
{"add_comment":{"max":1},"create_issue":{"max":1},"missing_data":{},"missing_tool":{},"noop":{"max":1},"push_to_pull_request_branch":{"max":0}}
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Enable push-to-pull-request output in pr-fix config

The safe-outputs config generated for the agent run sets push_to_pull_request_branch to "max":0, which effectively disables the workflow’s primary remediation action. As a result, /pr-fix can analyze failures but cannot emit the push operation needed to update the PR branch, so the workflow cannot complete its core job of applying fixes.

Useful? React with 👍 / 👎.

if: >
(needs.pre_activation.outputs.activated == 'true') && ((github.event_name == 'issues') && ((startsWith(github.event.issue.body, '/pr-fix ')) ||
(github.event.issue.body == '/pr-fix')) || (github.event_name == 'issue_comment') && (((startsWith(github.event.comment.body, '/pr-fix ')) ||
(github.event.comment.body == '/pr-fix')) && (github.event.issue.pull_request == null)) || (github.event_name == 'issue_comment') &&
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Restrict pr-fix activation to pull-request contexts

This condition explicitly activates on issue_comment events where github.event.issue.pull_request == null, so /pr-fix on a regular issue still launches a PR-fix run. In that path there is no linked PR branch to update, while the prompt logic assumes a PR number, which leads to noisy failed/no-op runs for non-PR issue comments.

Useful? React with 👍 / 👎.

@javdl javdl merged commit efe2564 into main Mar 11, 2026
28 of 29 checks passed
@javdl javdl deleted the codex/agentic-workflows branch March 11, 2026 22:45
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant