Repository navigation
fix(ci): keep PR review intake read-only - #772
Closed
zhongkechen wants to merge 7 commits into
Closed
zhongkechen wants to merge 7 commits into
zhongkechen wants to merge 7 commits into
Conversation
zhongkechen
temporarily deployed
to
ai-pr-review-runtime
October 3, 2026 02:57 — with 
GitHub Actions
Inactive
GitHub Actions
Inactive
zhongkechen
temporarily deployed
to
ai-pr-review-runtime
October 3, 2026 02:57 — with
GitHub Actions
Inactive
GitHub Actions
Inactive
This comment has been minimized.
This comment has been minimized.
3 of 4 tasks
zhongkechen
temporarily deployed
to
ai-pr-review-runtime
October 5, 2026 23:26 — with
GitHub Actions
Inactive
GitHub Actions
Inactive
This comment has been minimized.
This comment has been minimized.
zhongkechen
temporarily deployed
to
ai-pr-review-runtime
October 6, 2026 00:25 — with
GitHub Actions
Inactive
GitHub Actions
Inactive
This comment has been minimized.
This comment has been minimized.
zhongkechen
temporarily deployed
to
ai-pr-review-runtime
October 7, 2026 01:14 — with
GitHub Actions
Inactive
GitHub Actions
Inactive
This comment has been minimized.
This comment has been minimized.
zhongkechen
temporarily deployed
to
ai-pr-review-runtime
October 7, 2026 21:48 — with
GitHub Actions
Inactive
GitHub Actions
Inactive
This comment has been minimized.
This comment has been minimized.
zhongkechen
temporarily deployed
to
ai-pr-review-runtime
October 7, 2026 22:15 — with
GitHub Actions
Inactive
GitHub Actions
Inactive
Contributor
Codex AI reviewNo actionable findings. The SHA-anchored PR diff is empty and the metadata reports zero changed files, so there are no introduced changes or attributable test risks to review. Reviewed commit |
This branch was previously deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
AI review-comment intake could fail before creating any jobs: its read-only job called a reusable workflow that also declares a privileged issue worker. GitHub rejects the nested permission contract even though a separate trusted continuation already owns the writing phase.
Call the existing pinned read-only work-item resolver with review scope and artifact upload. Preserve the workflow-run continuation, permissions, same-repository/trusted-actor guards, concurrency settings and artifact contract.
Validation: actionlint, YAML schema, permission/artifact contract checks and 56 existing resolver tests pass. The original startup runs had no jobs or check runs; hosted validation of the corrected caller is pending on this PR. No SDK runtime files or shared CI workflow versions change.