feat(workflows): add agentic workflows for automated issue triage, implementation, PR review, dependency review, and doc-staleness detection by bindsi · Pull Request #1219 · microsoft/hve-core

bindsi · 2026-03-27T12:38:17Z

feat(agents): add sub-issue decomposition to Issue Triage Agent and agentic workflows documentation

This PR enhances the Issue Triage Agent with automatic sub-issue decomposition for oversized issues and adds comprehensive documentation covering the full agentic workflow pipeline in hve-core.

The triage agent gained the ability to break down broad issues into independently deliverable sub-issues, creating them via the GitHub API and linking them to the parent. A new architecture documentation page maps the end-to-end flow from issue creation through automated triage, implementation, and PR review, with Mermaid process flow diagrams and a catalog of all interactive agents.

Description

Agentic Workflows

Five workflows configured with the gh aw Copilot engine, each triggered by specific GitHub events:

issue-triage (issue-triage.md): triggered on issue opened or labeled needs-triage. Classifies issues, applies labels from an allowlist, detects duplicates, and assesses quality with semantic coherence and scope validation checks. Removes needs-triage after processing. Uses checkout: false since it operates entirely through GitHub MCP tools.
issue-implement (issue-implement.md): triggered on issue labeled agent-ready by admin/maintainer/write users. Reads the issue, searches the codebase, implements changes, and creates a PR. An Instruction Priority section overrides the imported task-implementor agent's subagent orchestration procedure, directing the AI to follow only the workflow's 6-step linear procedure.
pr-first-pass-review (pr-first-pass-review.md): triggered on PR opened or marked ready for review. Reviews non-maintainer PRs across five dimensions: issue alignment, template compliance, coding standards, code quality, and consolidated feedback. An Instruction Priority section overrides imported agent multi-pass procedures.
dependency-pr-review (dependency-pr-review.md): triggered on Dependabot PRs touching dependency files. Reviews version bumps for license compatibility, SHA pinning compliance, and environment synchronization. Auto-approves safe patch and minor bumps; flags major bumps for human review.
doc-update-check (doc-update-check.md): triggered on push to main touching code paths. Detects stale documentation by mapping code files to their documentation counterparts and creates issues with documentation, needs-triage, and agent-ready labels — chaining into issue-implement for automated documentation fixes.

Agent Enhancements

The Issue Triage Agent (issue-triage.agent.md) received a new step 8 for decomposing oversized issues. When an issue touches multiple components, contains independent acceptance criteria, or implies sequential phases, the agent breaks it into focused sub-issues.

Added decomposition signal detection: multi-component scope, unrelated acceptance criteria, independent phases, and effort estimation
Each sub-issue is created with mcp_github_issue_write and linked to the parent via mcp_github_sub_issue_write
Sub-issues receive the same type and component labels but not agent-ready, leaving that for a subsequent triage pass
The parent issue serves as an epic-style tracker and does not receive agent-ready when sub-issues are created
Updated the constraints section to permit issue creation only in the context of decomposition
Updated the frontmatter description to reflect the new decomposing capability
Added comment placement guidance to dependency-reviewer.agent.md for inline vs. general review comments.

Documentation

A new Agentic Workflows page (docs/architecture/agentic-workflows.md) documents the complete automated and interactive agent ecosystem:

End-to-end Mermaid flowchart tracing an issue from creation through triage, implementation, PR review, and merge (including the new sub-issue decomposition step)
State diagram illustrating label-driven handoffs (needs-triage → classified → agent-ready → PR opened → review-passed → merged)
System overview diagram showing how automated workflows and interactive agents share instruction files, tracking artifacts, and GitHub labels
Workflow configuration table mapping .md source files to compiled lock files, triggers, and agents
Catalog of interactive agents: RPI Orchestration, Prompt Builder, Security Reviewer, Code Review, Doc Ops, Backlog Management, and Project Planning

The architecture README (docs/architecture/README.md) gained a cross-reference to the new page in the Further Reading section.

Other Changes

Updated generated plugin READMEs (plugins/github/README.md, plugins/hve-core-all/README.md, plugins/hve-core/README.md) reflecting agent catalog changes from npm run plugin:generate

Related Issue(s)

None

Type of Change

Code & Documentation:

Bug fix (non-breaking change fixing an issue)
New feature (non-breaking change adding functionality)
Breaking change (fix or feature causing existing functionality to change)
Documentation update

Infrastructure & Configuration:

AI Artifacts:

Reviewed contribution with prompt-builder agent and addressed all feedback
Copilot instructions (.github/instructions/*.instructions.md)
Copilot prompt (.github/prompts/*.prompt.md)
Copilot agent (.github/agents/*.agent.md)
Copilot skill (.github/skills/*/SKILL.md)

Other:

Script/automation (.ps1, .sh, .py)
Other (please describe): GitHub Agentic Workflow configuration files (.github/workflows/*.md)

Sample Prompts (for AI Artifact Contributions)

User Request:

Triage a newly opened issue that spans agents, scripts, and extension changes with broad acceptance criteria.

Execution Flow:

The Issue Triage Agent reads the issue and classifies by type and component.
Step 8 detects multiple component references and independent acceptance criteria.
The agent creates focused sub-issues using mcp_github_issue_write, each targeting a single component.
Sub-issues are linked to the parent via mcp_github_sub_issue_write.
A summary comment is posted on the parent issue listing all sub-issues.
The parent retains type and component labels but does not receive agent-ready.

Output Artifacts:

New GitHub sub-issues linked to the parent, each with action-oriented titles and focused acceptance criteria
Summary comment on the parent issue with sub-issue links

Success Indicators:

Parent issue has sub-issues visible in the GitHub UI
Each sub-issue is scoped to a single component with clear acceptance criteria
No agent-ready label on the parent or sub-issues (awaiting subsequent triage)

Testing

Automated validation:

Check	Status
`npm run lint:md`	Passed (0 errors in changed files)
`npm run spell-check`	Passed (0 issues in 255 files)
`npm run lint:frontmatter`	Passed (0 errors in 382 files)
`npm run validate:skills`	Passed (9/9 skills valid)
`npm run lint:ps`	Passed (all files clean)
`npm run lint:md-links`	Passed (0 broken links)

Manual testing:

Not performed. Changes are documentation and agent prompt modifications.

Checklist

Required Checks

Documentation is updated (if applicable)
Files follow existing naming conventions
Changes are backwards compatible (if applicable) (N/A — new capability added, no existing behavior removed)
Tests added for new functionality (if applicable) (N/A — agent prompt and documentation changes, no unit test framework applicable)

AI Artifact Contributions

Used /prompt-analyze to review contribution
Addressed all feedback from prompt-builder review
Verified contribution follows common standards and type-specific requirements

Required Automated Checks

The following validation commands must pass before merging:

Markdown linting: npm run lint:md
Spell checking: npm run spell-check
Frontmatter validation: npm run lint:frontmatter
Skill structure validation: npm run validate:skills
Link validation: npm run lint:md-links
PowerShell analysis: npm run lint:ps

Security Considerations

This PR does not contain any sensitive or NDA information
Any new dependencies have been reviewed for security issues (N/A — no new dependencies)
Security-related scripts follow the principle of least privilege (N/A — no security script changes)

GHCP Artifact Maturity

File	Type	Maturity	Notes
`.github/agents/github/issue-triage.agent.md`	Agent	stable	Added sub-issue decomposition step

Additional Notes

The plugin READMEs under plugins/ are generated output from npm run plugin:generate and should not be edited directly.
The .vscode/mcp.json and .vscode/settings.json changes are local configuration improvements unrelated to the core feature.

codecov-commenter · 2026-03-27T13:41:43Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.66%. Comparing base (b3f73e2) to head (b9ed8b9).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1219      +/-   ##
==========================================
- Coverage   87.72%   87.66%   -0.07%     
==========================================
  Files          61       61              
  Lines        9318     9305      -13     
==========================================
- Hits         8174     8157      -17     
- Misses       1144     1148       +4

Flag	Coverage Δ
pester	`85.30% <ø> (-0.02%)`	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 2 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

…hecker agents - implement automated issue triage for classification and labeling - create dependency reviewer for evaluating dependency changes - add doc update checker to verify documentation accuracy post-code changes - update collections to include new agents Signed-off-by: Marcel Bindseil <[email protected]>

🔧 - Generated by Copilot Signed-off-by: Marcel Bindseil <[email protected]>

- add project scope and classification criteria to issue triage agent - refine dependency reviewer findings placement and constraints - update documentation check workflows for improved tool management - adjust PR review workflow to include reaction handling and timeout settings Signed-off-by: Marcel Bindseil <[email protected]>

- include recent repository activity tracking - add progress tracking and goal reminders - provide project status and actionable next steps 📅 - Generated by Copilot Signed-off-by: Marcel Bindseil <[email protected]>

Signed-off-by: Marcel Bindseil <[email protected]>

Remove task-implementor.agent.md import from issue-implement workflow (designed for interactive Copilot Chat, not CI sandbox). Add .copilotignore to exclude heavy directories (agents, skills, instructions, docs, plugins) from Copilot CLI context discovery. Combined, these reduce prompt tokens from ~187K to within the 168K limit.

…verflow Sparse-checkout limits the workspace to essential directories only, preventing Copilot CLI from discovering the massive .github/agents/, .github/instructions/, and .github/skills/ directories (~1.8MB of markdown) that push the prompt from ~5K to ~184K tokens.

The agent import (15KB) fits within the token limit now that sparse-checkout excludes the heavy .github/ directories from the workspace.

Copilot CLI standalone mode ignores .copilotignore; sparse-checkout in the workflow frontmatter handles token budget control.

Apply sparse-checkout or checkout:false to remaining workflows to stay within the Copilot CLI 168K token limit. - issue-triage: checkout: false (only uses GitHub MCP tools) - dependency-review: sparse-checkout with dependency files + instructions - doc-update-check: sparse-checkout with docs + source dirs + instructions - pr-first-pass-review: sparse-checkout with PR template + instructions

Instruct the doc-update-check workflow to create issues following the bug-report template structure with component: Documentation. Add agent-ready label so implementable doc issues are picked up by issue-implement workflow. Include ISSUE_TEMPLATE/ in sparse-checkout.

Signed-off-by: Marcel Bindseil <[email protected]>

…clarity - add descriptions to doc-update-check, dependency-review, issue-implement, issue-triage, and pr-first-pass-review workflows - improve documentation for better understanding of workflow purposes Signed-off-by: Marcel Bindseil <[email protected]>

…tomation details - add issue triage agent description to GitHub Backlog Management and HVE Core All README - enhance HVE Core README with dependency reviewer and doc update checker details - link agentic workflows in architecture overview Signed-off-by: Marcel Bindseil <[email protected]>

- add GitHub and Jira backlog workflows to overview - include cautionary note on security and compliance agents - introduce new security and planning agents: Security Planner, SSSC Planner, RAI Planner - update skills section with GitLab and Jira integrations Signed-off-by: Marcel Bindseil <[email protected]>

- Add missing author, ms.date, ms.topic fields to agentic-workflows.md - Add Copilot footer to 5 workflow .md files - Add GH_AW_MODEL_AGENT_COPILOT and GH_AW_MODEL_DETECTION_COPILOT to actionlint config variables - Ignore shellcheck SC2086/SC2129 in generated .lock.yml files - Fix brace-expansion moderate vulnerability via npm audit fix - Regenerate plugins after rebase from upstream

🔒 - Generated by Copilot Signed-off-by: Marcel Bindseil <[email protected]>

…endency review workflow - Implement automated review for Dependabot version bump PRs - Establish safety checks and approval criteria for dependency changes - Update documentation to reflect new workflow and its purpose - Enhance existing workflows with clearer descriptions Signed-off-by: Marcel Bindseil <[email protected]>

…opilot attribution Signed-off-by: Marcel Bindseil <[email protected]>

- implement quality review process for pull requests - define advisory mode for maintainer PRs - establish review steps for issue alignment, template compliance, coding standards, and code quality - update documentation to reflect new PR review workflow Signed-off-by: Marcel Bindseil <[email protected]>

…collections 🔧 - Generated by Copilot Signed-off-by: Marcel Bindseil <[email protected]>

# Conflicts: # docs/docusaurus/src/data/collectionCards.ts

katriendg

Thanks for this interesting and exciting work! I'm really keen to see how this will work as an experimental phase 🤖

I have left some comments which I believe make this the right level of internal HVE-core testing while not overloading the published artifacts with internal agents whch contain very repo-specific guidance.

Another one, nit:
your PR has a GHCP maturity table only listing one workflow file, I believe they should all be listed.

…uration - change workflow name from "PR First-Pass Review" to "PR Review" - update metadata hashes in lock files for consistency - enhance issue triage and PR review configurations Signed-off-by: Marcel Bindseil <[email protected]>

…orkflow Signed-off-by: Marcel Bindseil <[email protected]>

…r agents - implement automated dependency review for licensing and maintenance - create documentation accuracy checker for code changes - update workflow imports to reflect new agent paths - remove legacy agent references from collections and README Signed-off-by: Marcel Bindseil <[email protected]>

Signed-off-by: Marcel Bindseil <[email protected]>

…on and labeling - implement agent for classifying, labeling, and assessing GitHub issues - update workflows to reference new agent - remove deprecated references from collections and documentation Signed-off-by: Marcel Bindseil <[email protected]>

katriendg

Thanks for the changes Marcel.
Please undo your changes to the .md files in the collections folder as well, these refer to non existing files now.

…ions Signed-off-by: Marcel Bindseil <[email protected]>

Signed-off-by: Marcel Bindseil <[email protected]>

## Pre-Release 3.3.41 ### ✨ Features - add agentic workflows for automated issue triage, implementation, PR review, dependency review, and doc-staleness detection (#1219) - consolidate package-lock.json version sync into Update-VersionFiles.ps1 (#1240) - add standards code review agent and full review orchestrator (#1174) - standardize pytest-mock as Python mocking framework (#1170) - add Jira backlog workflows and Jira/GitLab skills (#978) - add centralized version bump script and supply-chain attestation (#1183) ### 🐛 Bug Fixes - replace invalid bare tool names with official tool identifiers (#1198) - fix broken links and remove orphaned reference in code review docs (#1257) - exclude Python env dirs from skill validation warnings (#1255) - pin happy-dom and serialize-javascript to resolve Dependabot vulnerabilities (#1253) - remove Mermaid diagram and add missing collection cards (#1247) - disable MCP servers by default to prevent token limit errors (#1144) - sync package-lock.json after pre-release version bump (#1236) - separate mermaid node declarations and add dynamic diagram generation with tests (#1215) - replace anchor links in meeting-analyst with bold text references (#1201) - remove recursive symlinks in jira and gitlab skill directories (#1233) - validate-installation scripts now check .github/skills directory (#1010) (#1206) - resolve npm audit vulnerabilities via dependency overrides (#1200) - add post-release triggers to scorecard workflow (#1186) - add missing .md extensions to relative links in agent documentation (#1180) ### 📚 Documentation - CLI getting-started: clarify plugin install commands as alternatives (-all vs base) (#1251) ### ♻️ Refactoring - align agent and prompt folder names to collection identifier (#1210) ### 🔧 Maintenance - streamline RAI Planner phase structure and documentation (#1273) - bump happy-dom from 20.8.8 to 20.8.9 in /docs/docusaurus (#1237) - pre-release 3.3.27 (#1191) - bump pygments from 2.19.2 to 2.20.0 in /.github/skills/gitlab/gitlab (#1234) - bump path-to-regexp from 0.1.12 to 0.1.13 in /docs/docusaurus (#1226) - bump the github-actions group with 4 updates (#1231) - add missing folders and alphabetize location lists (#1193) - bump brace-expansion (#1224) - bump handlebars from 4.7.8 to 4.7.9 in /docs/docusaurus (#1217) - bump brace-expansion from 5.0.3 to 5.0.5 in /docs/docusaurus (#1213) - pre-release 3.3.10 (#1187) - bump markdownlint-cli2 from 0.21.0 to 0.22.0 in the npm-dependencies group (#1175) - bump the github-actions group with 3 updates (#1176) - pre-release 3.3.1 (#1165) --- *Managed automatically by pre-release workflow.* Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

## Pre-Release 3.3.101 ### ✨ Features - add removed maturity tier and retire owasp-docker (#1444) - add evaluation dataset creator (#1279) - align RAI planner with guide, remove scoring, improve UX (#1287) - add PSGallery staleness check and BOM cleanup (#1379) - ISA-95 network planner agent (#1177) - auto-generate collection.md with maturity filtering (#1316) - add folder-consistency check and standardize WARN outp… (#1350) - add synth-data-generate prompt to data-science collection (#1419) - add canonical deck workflow and customer-card rendering for design thinking (#1413) - add Figma MCP integration for DT artifact export (#1222) - introduce `owasp-docker` (#1245) - replace hve-core-specific references with portable discovery-based language (#1335) - introduce `owasp-cicd` (#1246) - add secure-by-design knowledge skill (#1223) - introduce `owasp-infrastructure` (#1244) - introduce `owasp-mcp` (#1207) - add OutputPath parameter to Invoke-LinkLanguageCheck.ps1 (#1229) - add -OutputPath parameter to Validate-SkillStructure.ps1 (#1225) - add maintainer-only skip-review label guard (#1293) - add extension collections overview and integrate into getting started flow (#950) - add agentic workflows for automated issue triage, implementation, PR review, dependency review, and doc-staleness detection (#1219) - consolidate package-lock.json version sync into Update-VersionFiles.ps1 (#1240) - add standards code review agent and full review orchestrator (#1174) - standardize pytest-mock as Python mocking framework (#1170) - add Jira backlog workflows and Jira/GitLab skills (#978) - add centralized version bump script and supply-chain attestation (#1183) ### 🐛 Bug Fixes - pin PowerShell-Yaml to 0.4.7 across all install sites (#1378) - close fork-PR/workflow-file-PR secret-strip gap and normalize upload-artifact version (#1421) - replace stream-based lookahead with array indexing in list-changed-files.sh (#1376) - centralize ISO 8601 timestamp regex in CIHelpers (#1343) - update stale documentation date in release-process.md (#1363) - pin basic-ftp to 5.3.0 to resolve GHSA-rp42-5vxx-qpwr (#1374) - add bot filter to dependency PR review workflow (#1362) - resolve pip-audit findings in powerpoint, gitlab, and jira skill lock files (#1360) - standardize Timestamp JSON key casing across all lint result files (#1314) - add synchronize trigger to PR Review workflow (#1323) - standardize timestamp in Validate-SkillStructure.ps1 to use Get-StandardTimestamp (#1280) - add parallel subagent dispatch and structured JSON contracts to code-review-full (#1304) - standardize timestamp in SecurityHelpers.psm1 to use Get-StandardTimestamp (#1284) - standardize timestamps in Test-DependencyPinning.ps1 and SecurityClasses.psm1 (#1282) - derive collection artifact counts from YAML at build time (#1275) - standardize timestamp in FrontmatterValidation.psm1 to use Get-StandardTimestamp (#1285) - standardize timestamp in Markdown-Link-Check.ps1 to use Get-StandardTimestamp (#1283) - escape hyphens in Mermaid diagram on Collections page (#1262) - add summary timestamp to PSScriptAnalyzer output (#1211) - fix plugin compatibility and robustness for coding-standards code review agents (#1289) - standardize timestamp in Test-CopyrightHeaders.ps1 to use Get-StandardTimestamp (#1278) - standardize timestamp in Invoke-YamlLint.ps1 to use Get-StandardTimestamp (#1270) - standardize timestamp in Invoke-LinkLanguageCheck.ps1 to use Get-StandardTimestamp (#1264) - fix dependency-review path filters and sparse-checkout cone mode (#1259) - replace invalid bare tool names with official tool identifiers (#1198) - fix broken links and remove orphaned reference in code review docs (#1257) - exclude Python env dirs from skill validation warnings (#1255) - pin happy-dom and serialize-javascript to resolve Dependabot vulnerabilities (#1253) - remove Mermaid diagram and add missing collection cards (#1247) - disable MCP servers by default to prevent token limit errors (#1144) - sync package-lock.json after pre-release version bump (#1236) - separate mermaid node declarations and add dynamic diagram generation with tests (#1215) - replace anchor links in meeting-analyst with bold text references (#1201) - remove recursive symlinks in jira and gitlab skill directories (#1233) - validate-installation scripts now check .github/skills directory (#1010) (#1206) - resolve npm audit vulnerabilities via dependency overrides (#1200) - add post-release triggers to scorecard workflow (#1186) - add missing .md extensions to relative links in agent documentation (#1180) ### 📚 Documentation - broaden Security Review description beyond OWASP (#1385) - document maintainer advisory mode and skip-review label guard (#1386) - document ExcludePaths/OutputPath for Invoke-LinkLanguageCheck (#1383) - CLI getting-started: clarify plugin install commands as alternatives (-all vs base) (#1251) ### ♻️ Refactoring - align agent and prompt folder names to collection identifier (#1210) ### 🔧 Maintenance - pin PSScriptAnalyzer to 1.25.0 and sync stale workflow version comments (#1389) - bump lxml from 6.0.2 to 6.1.0 in /.github/skills/experimental/powerpoint (#1424) - bump @vscode/vsce from 3.7.1 to 3.9.1 in the npm-dependencies group (#1390) - bump the github-actions group across 1 directory with 7 updates (#1391) - bump follow-redirects from 1.15.11 to 1.16.0 in /docs/docusaurus (#1356) - upgrade Node.js from 20 to 24 and bump cspell to v10 (#1353) - bump basic-ftp from 5.2.0 to 5.2.1 (#1324) - update github/gh-aw-actions requirement to 536ea1bad8c6715d098a9dc1afea8d403733acfe in the github-actions group across 1 directory (#1298) - update security instruction attributions and compliance (#1294) - bump the npm-dependencies group with 2 updates (#1297) - pre-release 3.3.41 (#1252) - streamline RAI Planner phase structure and documentation (#1273) - bump happy-dom from 20.8.8 to 20.8.9 in /docs/docusaurus (#1237) - pre-release 3.3.27 (#1191) - bump pygments from 2.19.2 to 2.20.0 in /.github/skills/gitlab/gitlab (#1234) - bump path-to-regexp from 0.1.12 to 0.1.13 in /docs/docusaurus (#1226) - bump the github-actions group with 4 updates (#1231) - add missing folders and alphabetize location lists (#1193) - bump brace-expansion (#1224) - bump handlebars from 4.7.8 to 4.7.9 in /docs/docusaurus (#1217) - bump brace-expansion from 5.0.3 to 5.0.5 in /docs/docusaurus (#1213) - pre-release 3.3.10 (#1187) - bump markdownlint-cli2 from 0.21.0 to 0.22.0 in the npm-dependencies group (#1175) - bump the github-actions group with 3 updates (#1176) - pre-release 3.3.1 (#1165) --- *Managed automatically by pre-release workflow.* Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

bindsi requested a review from a team as a code owner March 27, 2026 12:38

bindsi added 16 commits March 27, 2026 16:24

chore: remove redundant code blocks from changes section

ef86593

🔧 - Generated by Copilot Signed-off-by: Marcel Bindseil <[email protected]>

feat(workflows): create daily repo status report workflow

018f120

- include recent repository activity tracking - add progress tracking and goal reminders - provide project status and actionable next steps 📅 - Generated by Copilot Signed-off-by: Marcel Bindseil <[email protected]>

chore: remove redundant code blocks from changes

1d58494

Signed-off-by: Marcel Bindseil <[email protected]>

fix(workflows): restore task-implementor import with sparse-checkout

8e8d25f

The agent import (15KB) fits within the token limit now that sparse-checkout excludes the heavy .github/ directories from the workspace.

chore: remove ineffective .copilotignore

683ce45

Copilot CLI standalone mode ignores .copilotignore; sparse-checkout in the workflow frontmatter handles token budget control.

chore(workflows): remove daily repo status report workflow file

50d4ac5

Signed-off-by: Marcel Bindseil <[email protected]>

bindsi force-pushed the main branch from c151e18 to d4f5b5c Compare March 27, 2026 16:38

bindsi and others added 8 commits March 27, 2026 16:55

fix(workflows): reorder shellcheck ignore rules for consistency

5e349ce

🔒 - Generated by Copilot Signed-off-by: Marcel Bindseil <[email protected]>

Merge branch 'main' into main

d7a6c32

Merge branch 'main' of https://github.com/bindsi/hve-core

2ad198e

style(workflows): refine Dependabot PR review documentation and add C…

3adf229

…opilot attribution Signed-off-by: Marcel Bindseil <[email protected]>

Merge branch 'main' into main

f2c11a8

Merge branch 'main' into main

bc2849c

Merge branch 'main' into main

5c52142

rezatnoMsirhC reviewed Mar 31, 2026

View reviewed changes

Comment thread .github/workflows/issue-triage.md

Comment thread .github/workflows/pr-review.lock.yml Outdated

Comment thread .github/agents/agentic-workflows.agent.md Outdated

Comment thread .github/workflows/doc-update-check.md

Comment thread .github/workflows/doc-update-check.md

bindsi added 2 commits April 1, 2026 10:36

fix(collectionCards): update artifact counts for GitHub and hve-core …

4c6d217

…collections 🔧 - Generated by Copilot Signed-off-by: Marcel Bindseil <[email protected]>

Merge remote-tracking branch 'upstream/main'

ca8f32e

# Conflicts: # docs/docusaurus/src/data/collectionCards.ts

katriendg reviewed Apr 1, 2026

View reviewed changes

bindsi added 3 commits April 1, 2026 13:27

fix(workflows): correct advisory review summary prefix in PR review w…

de2cf25

…orkflow Signed-off-by: Marcel Bindseil <[email protected]>

katriendg reviewed Apr 1, 2026

View reviewed changes

Comment thread .github/agents/issue-triage.agent.md

bindsi added 2 commits April 1, 2026 14:12

fix(collectionCards): update artifact counts for hve-core collections

6dc0e5b

Signed-off-by: Marcel Bindseil <[email protected]>

katriendg approved these changes Apr 1, 2026

View reviewed changes

bindsi added 2 commits April 1, 2026 15:36

docs: remove Issue Triage Agent and related descriptions from collect…

70942b7

…ions Signed-off-by: Marcel Bindseil <[email protected]>

fix(docs): correct formatting in agentic workflows documentation

fa39443

Signed-off-by: Marcel Bindseil <[email protected]>

nguyena2 approved these changes Apr 1, 2026

View reviewed changes

rezatnoMsirhC approved these changes Apr 1, 2026

View reviewed changes

WilliamBerryiii and others added 4 commits April 1, 2026 10:29

Merge branch 'main' into main

fa30ef3

Merge branch 'main' into main

45e56d6

Merge branch 'main' into main

b9ed8b9

Merge branch 'main' into main

64ff783

WilliamBerryiii merged commit b348b68 into microsoft:main Apr 1, 2026
45 checks passed

This was referenced Apr 1, 2026

chore(main): pre-release 3.3.41 #1252

Merged

chore(main): release hve-core 3.4.0 #1184

Open

hve-core-release-please Bot mentioned this pull request Apr 2, 2026

chore(main): pre-release 3.3.101 #1274

Merged

hve-core-release-please Bot mentioned this pull request Apr 27, 2026

chore(main): pre-release 3.3.111 #1476

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(workflows): add agentic workflows for automated issue triage, implementation, PR review, dependency review, and doc-staleness detection#1219

feat(workflows): add agentic workflows for automated issue triage, implementation, PR review, dependency review, and doc-staleness detection#1219
WilliamBerryiii merged 38 commits intomicrosoft:mainfrom
bindsi:main

bindsi commented Mar 27, 2026 •

edited

Loading

Uh oh!

codecov-commenter commented Mar 27, 2026 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

katriendg left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

katriendg left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

Conversation

bindsi commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

feat(agents): add sub-issue decomposition to Issue Triage Agent and agentic workflows documentation

Description

Agentic Workflows

Agent Enhancements

Documentation

Other Changes

Related Issue(s)

Type of Change

Sample Prompts (for AI Artifact Contributions)

Testing

Checklist

Required Checks

AI Artifact Contributions

Required Automated Checks

Security Considerations

GHCP Artifact Maturity

Additional Notes

Uh oh!

codecov-commenter commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

katriendg left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

katriendg left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

bindsi commented Mar 27, 2026 •

edited

Loading

codecov-commenter commented Mar 27, 2026 •

edited

Loading