mirror of
https://github.com/Akkudoktor-EOS/EOS.git
synced 2026-11-13 01:03:45 +01:00
Bobby NoelteandClaude Opus 5.5
14e439c265
GitHub blocks pull_request_target by default in public repositories from December 2, 2026. The ai-self-review workflow now runs on pull_request. It still checks out and runs the check script of the base branch and no other code of the pull request. The workflow file itself now comes from the pull request, so a pull request that changes it can weaken its own check. .github/CODEOWNERS therefore makes a maintainer the code owner of the workflows, CODEOWNERS and the check script; this is enforced once the branch protection of main requires a review from code owners. Additional changes - Record the switch in ADR 0002, which supersedes the pull_request_target consequence of ADR 0001. - Skip the comment step for pull requests from forks, whose token is read-only, and point their error message to the job summary only. - Describe the trigger, code owners and fork limits in docs/develop/ai.md. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assisted-by: Claude Code (claude-opus-5-5)
7 lines
362 B
Plaintext
7 lines
362 B
Plaintext
# Changes to the CI workflows and to the AI self-review check need a maintainer's review, see
|
|
# docs/adr/0002-self-review-check-on-pull-request.md. This is enforced once the branch protection
|
|
# of main requires a review from code owners.
|
|
/.github/workflows/ @b0661 @NormannK
|
|
/.github/CODEOWNERS @b0661 @NormannK
|
|
/scripts/check_pr_self_review.py @b0661 @NormannK
|