Skip to content

Conversation

@caugner
Copy link
Contributor

@caugner caugner commented Feb 9, 2026

Description

Refines the pr-review-companion workflow:

  1. Identifies the PR number via the GitHub API, instead of using the NR file in the build artifact.
  2. Reports the review deployment status on fork PRs as well, using the head_sha from the workflow_run payload.

Motivation

  1. Improve the security of the workflow.
  2. Make review deployment status visible on fork PRs.

Additional details

Related issues and pull requests

Same approach as in Fred:

@caugner caugner requested a review from a team as a code owner February 9, 2026 19:27
@caugner caugner requested review from LeoMcA and removed request for a team February 9, 2026 19:27
@github-actions github-actions bot added system [PR only] Infrastructure and configuration for the project size/s [PR only] 6-50 LoC changed labels Feb 9, 2026
@github-actions github-actions bot removed the system [PR only] Infrastructure and configuration for the project label Feb 9, 2026
@caugner
Copy link
Contributor Author

caugner commented Feb 9, 2026

Test failure is unrelated:

 Fetching list of changed files for PR#43072 from Github API
  Invoking listFiles(pull_number: 43072, per_page: 100)
Error: This endpoint is temporarily being throttled. Please try again later. For more on scraping GitHub and how it may affect your rights, please review our Terms of Service (https://docs.github.com/en/site-policy/github-terms/github-terms-of-service)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/s [PR only] 6-50 LoC changed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant