Commit Graph
15 Commits
Author SHA1 Message Date
Aaron PowellandCopilot App d7e4ad98ed Add Copilot code review quality guidance (#3665)
* Add Copilot code review quality guidance

Add a repository-specific Copilot Code Review skill for repo-fit, provenance, differentiation, validation, and marketing-signal review. Wire it into the repo review instructions and CODEOWNERS, add an advisory PR quality-signal workflow, and tighten the Learning Hub updater instructions to reuse existing bot PRs instead of creating duplicate stale update PRs.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Fix PR review workflow feedback

Add constrained safe outputs for reusing and closing Learning Hub bot pull requests, and declare the quality-signal workflow name in source frontmatter.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Upgrade agentic workflows

Rebase the PR onto main and upgrade gh-aw to v0.88.8. Refresh setup actions, generated workflow locks, container pins, and updater permissions.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
2026-09-23 13:26:28 +10:00
Michael RecachinasandCopilot 925dc83735 Migrate pull request automation away from pull_request_target (#2625)
* Migrate pull_request_target workflows

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address PR duplicate check writer review

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Fix duplicate-check writer artifact handling

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Make PR duplicate check gh-aw compilable

Configure the agentic workflow source to allow fork PR triggers with staged safe outputs, upload a PR context artifact through supported post-steps, and have the workflow_run writer consume that context before publishing validated comments. This lets gh-aw regenerate the lockfile without restoring pull_request_target or privileged PR-code execution.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 512eb347-ec89-4250-8bf1-87048974b01d

* Harden workflow-run PR writers

Bind privileged artifact processing to trusted workflow-run PR identity, serialize same-PR writers, and cap aggregate quality comments.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 512eb347-ec89-4250-8bf1-87048974b01d

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 512eb347-ec89-4250-8bf1-87048974b01d
2026-08-14 11:22:06 +10:00
Aaron Powell 7b602c3370 Updating to latest agentic workflows (#2556)
* Updating to latest agentic workflows

* cleaning up tools and more explicit copilot app checks
2026-08-07 11:19:05 +10:00
James MontemagnoandCopilot App 34f0e35050 Fix duplicate PR check role gating (#2241)
Remove the read-only role override from the PR duplicate check so gh-aw pre-activation gates unsupported actors before the PR checkout step runs.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
2026-07-08 11:23:01 +10:00
3bd22bc0f4 Fix PR duplicate check not running on external contributor submissions (#2188)
* Initial plan

* Fix PR duplicate check not running on external contributor submissions

Add forks: [\"*\"] and roles: all to pr-duplicate-check.md so the
agentic workflow runs for all PR authors, including external contributors
submitting from forks. Previously, the generated lock.yml contained:
- A fork repository check blocking all fork PRs from running
- A team membership check (admin/maintainer/write) blocking external contributors

Recompiled with gh aw compile to regenerate pr-duplicate-check.lock.yml.
The pre_activation job (which held the membership gate) is now removed,
and the activation job runs unconditionally for all pull_request events.

Closes #2121

Co-authored-by: aaronpowell <434140+aaronpowell@users.noreply.github.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* fixing a bunch of warnings on all the agentic workflows

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: aaronpowell <434140+aaronpowell@users.noreply.github.com>
Co-authored-by: Aaron Powell <me@aaron-powell.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-07-03 10:08:42 +10:00
9c87c1bb64 Upgrade agentic workflows from gh-aw v0.72.1 to v0.80.9 (#2092)
- Recompile all 6 workflow lock files with gh-aw v0.80.9
- Update gh-aw-actions/setup v0.72.1 → v0.80.9
- Update actions/checkout v6.0.2 → v7.0.0
- Refresh container image pins across all workflows
- Fix learning-hub-updater.md: add missing permissions.contents: read
  (root cause of safe_outputs 'Failed to apply bundle' failures)
- Update dispatcher SKILL.md and agentic-workflows agent
- Update actions-lock.json and copilot-setup-steps.yml

Fixes: #2077 (learning-hub-updater), #2080 (cli-for-beginners-sync)
Part of: #2076

Co-authored-by: Ayan Gupta <ayangupta@Ayans-MacBook-Pro.local>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-06-23 11:25:54 +10:00
Aaron Powell 0528d4104c Agentic Workflows update (#1727)
* adding a deeper analysis of the oldest items in the report

* Updating aw
2026-05-15 16:33:29 +10:00
Aaron Powell 0d9792baf1 updating agentic workflows (#1666) 2026-05-11 11:29:18 +10:00
Aaron Powell 3ce818d8d1 Updating agentic workflows (#1397) 2026-04-16 08:57:55 +10:00
Aaron Powell 6cef3005bd Content updater workflow change (#1189)
* Ignoring the CLI for Beginners course from the learning hub updater

* bumping aw release
2026-03-27 15:46:56 +11:00
Aaron Powell 6962f991ed Updating workflow to ignore noop (#1135) 2026-03-23 15:29:43 +11:00
Aaron Powell cb6cf924fb update to aw 0.61.2 (#1080) 2026-03-19 15:45:27 +11:00
Aaron PowellandCopilot Autofix powered by AI f97b43dd7c Learning hub evergreen (#1037)
* Adding new learning hub updater workflow

* Updating aw to latest

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-03-17 14:18:58 +11:00
Aaron Powell 3025370a15 Updating our agentic workflows (#996) 2026-03-13 12:25:46 +11:00
7f343aad22 Add PR Duplicate Check agentic workflow (#954)
* Initial plan

* feat: add PR duplicate check agentic workflow

Adds a new GitHub Agentic Workflow that triggers on pull_request
events (opened, synchronize, reopened) to detect potential duplicate
agents, instructions, skills, and workflows being contributed via PR.

When relevant files are changed, the agent compares them against
existing resources and posts a comment on the PR listing any potential
duplicates with context and a suggestion. If no relevant files are
changed or no duplicates are found, it calls noop.

- .github/workflows/pr-duplicate-check.md: source workflow (gh-aw format)
- .github/workflows/pr-duplicate-check.lock.yml: compiled workflow

Co-authored-by: aaronpowell <434140+aaronpowell@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: aaronpowell <434140+aaronpowell@users.noreply.github.com>
Co-authored-by: Aaron Powell <me@aaron-powell.com>
2026-03-13 09:42:56 +11:00