diff --git a/.github/workflows/codex_pr_review.yml b/.github/workflows/codex_pr_review.yml new file mode 100644 index 0000000..7ebfe30 --- /dev/null +++ b/.github/workflows/codex_pr_review.yml @@ -0,0 +1,31 @@ +name: Codex PR Review + +on: + pull_request_target: + types: [opened, synchronize, reopened] + +permissions: + contents: read + id-token: write + issues: write + pull-requests: write + +concurrency: + group: codex-pr-review-${{ github.event.pull_request.number }} + cancel-in-progress: true + +jobs: + review: + uses: QuantStrategyLab/AIAuditBridge/.github/workflows/codex_pr_review.yml@main + with: + caller_concurrency_key: pr-${{ github.event.pull_request.number || github.run_id }} + allow_unconfigured_backend: false + api_fallback_enabled: "false" + direct_api_primary_enabled: "false" + secrets: + CODEX_AUDIT_SERVICE_URL: ${{ secrets.CODEX_AUDIT_SERVICE_URL }} + permissions: + contents: read + id-token: write + issues: write + pull-requests: write diff --git a/.github/workflows/codex_review_gate.yml b/.github/workflows/codex_review_gate.yml index 56bcf4e..050094f 100644 --- a/.github/workflows/codex_review_gate.yml +++ b/.github/workflows/codex_review_gate.yml @@ -23,7 +23,7 @@ permissions: pull-requests: read concurrency: - group: codex-review-gate-${{ github.event.pull_request.number }} + group: codex-review-gate-${{ github.event.pull_request.number }}-${{ github.event_name }} cancel-in-progress: true jobs: