Copilot PR Review Runner #6706
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Copilot PR Review Runner | |
| # Thin caller for the reusable Business Central PR-review workflow, which | |
| # lives in microsoft/BC-ALAgents. All orchestration (PR resolution, | |
| # BCQuality clone+filter, running the Copilot CLI, rendering and posting | |
| # findings, plus the default BCQuality policy and reviewer behaviour) is | |
| # implemented in the engine. This repository supplies only the trigger and the | |
| # few inputs it customizes (it tracks the engine's latest release); everything | |
| # else inherits the engine template defaults. To diverge, pass the matching | |
| # `with:` input. | |
| # | |
| # Security model is preserved by the reusable workflow: the review job is | |
| # read-only and runs the model on the untrusted diff; a separate publish job | |
| # holds the write token and only posts saved artifacts. | |
| on: | |
| workflow_run: | |
| workflows: | |
| - Copilot PR Review | |
| types: | |
| - completed | |
| concurrency: | |
| group: copilot-pr-review-runner-${{ github.event.workflow_run.id }} | |
| cancel-in-progress: true | |
| # Union of the permissions the reusable workflow's jobs require. The reusable | |
| # workflow further restricts each job (review = read-only; publish = write). | |
| permissions: | |
| actions: read | |
| contents: read | |
| pull-requests: write | |
| issues: write | |
| copilot-requests: write | |
| jobs: | |
| review: | |
| if: github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.conclusion == 'success' | |
| uses: microsoft/BC-ALAgents/.github/workflows/review.yml@latest | |
| with: | |
| target_repo: ${{ github.repository }} | |
| engine_ref: latest | |