Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 4 additions & 10 deletions .github/workflows/claude_pr_review.yml
Original file line number Diff line number Diff line change
Expand Up @@ -7,23 +7,17 @@
#
# All the review logic (Bedrock auth, the pinned action, the restricted tool
# surface, the read-only PR-head checkout, and per-run limits) lives in the
# reusable workflow in OpenJobDescription/.github. This caller only forwards the
# reusable workflow in aws-deadline/.github. This caller only forwards the
# workflow_run identifiers and the role-ARN secret.
#
# Repo-specific focus: the reviewer reads this repository's .claude-review.md
# (from the base branch), which directs it to review RFC documents under rfcs/
# using the methodology in skills/openjd-rfc-review/SKILL.md -- design tenets,
# template completeness, and specification compatibility.
name: Claude PR Review

on: # zizmor: ignore[dangerous-triggers] -- workflow_run is intentional and safe here; see the header comment above (runs from default branch, fork PRs cannot alter behavior/secrets)
on:
workflow_run:
workflows: ["Claude PR Review (collect)"]
types:
- completed

# Cancel a superseded review when the PR is pushed again, keyed on the trusted
# head repo + branch from the workflow_run payload (no pull_request.number here).
# Cancel a superseded review when the PR is pushed again, keyed on the trusted head repo + branch from the workflow_run payload (no pull_request.number here).
concurrency:
group: claude-pr-review-${{ github.event.workflow_run.head_repository.full_name }}-${{ github.event.workflow_run.head_branch }}
cancel-in-progress: true
Expand All @@ -45,7 +39,7 @@ jobs:
# this prevents a review from firing -- with the base repo's secrets and a
# fork-controlled head_sha -- from a non-PR context.
if: ${{ github.event.workflow_run.conclusion == 'success' && github.event.workflow_run.event == 'pull_request' }}
uses: OpenJobDescription/.github/.github/workflows/reusable_claude_pr_review.yml@mainline
uses: aws-deadline/.github/.github/workflows/reusable_claude_pr_review.yml@mainline
permissions:
contents: read
pull-requests: write
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/claude_pr_review_collect.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,8 +11,8 @@
# fork's copy of this file cannot influence what gets reviewed or where comments
# are posted.
#
# This is a thin caller -- the (no-op) collect job lives in the reusable
# workflow in OpenJobDescription/.github.
# This is a thin caller -- the (now no-op) collect job lives in the reusable
# workflow in aws-deadline/.github.
name: Claude PR Review (collect)

on:
Expand All @@ -29,4 +29,4 @@ permissions: {}

jobs:
collect:
uses: OpenJobDescription/.github/.github/workflows/reusable_claude_pr_review_collect.yml@mainline
uses: aws-deadline/.github/.github/workflows/reusable_claude_pr_review_collect.yml@mainline
Loading