Skip to content

Add PR Review Tracker caller workflow#7966

Merged
hatton merged 3 commits into
masterfrom
add-pr-review-tracker-caller
Jun 15, 2026
Merged

Add PR Review Tracker caller workflow#7966
hatton merged 3 commits into
masterfrom
add-pr-review-tracker-caller

Conversation

@hatton

@hatton hatton commented Jun 15, 2026

Copy link
Copy Markdown
Member

Opts BloomDesktop into the BloomBooks PR Review Tracker org project (#2).

This thin caller forwards pull_request events (opened/reopened/synchronize) to the shared reusable workflow in BloomBooks/.github. That workflow adds the PR to the board and sets its Status to Waiting for AI-Review — including moving the card back to Waiting whenever a new commit is pushed.

Depends on:

To onboard another repo later: copy this same file into it and add it to the PROJECT_TOKEN secret's repository list.

🤖 Generated with Claude Code


This change is Reviewable

Forwards this repo's pull_request events (opened/reopened/synchronize) to the shared reusable workflow in BloomBooks/.github, which adds the PR to the PR Review Tracker org project (#2) and sets its Status to Waiting for AI-Review. Relies on the org-level PROJECT_TOKEN secret via secrets: inherit.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings June 15, 2026 22:44

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a GitHub Actions caller workflow to forward pull_request events to the BloomBooks shared reusable workflow that manages the org-level PR Review Tracker project automation.

Changes:

  • Introduces a new .github/workflows/pr-review.yml workflow triggered on pull_request (opened, reopened, synchronize).
  • Calls the reusable workflow in BloomBooks/.github and inherits secrets for project automation.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/workflows/pr-review.yml Outdated
Comment on lines +16 to +19
jobs:
track:
uses: BloomBooks/.github/.github/workflows/pr-review-tracker.yml@main
secrets: inherit

@hatton hatton Jun 15, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[Claude Opus 4.8] Good catch — fixed in 136c42a. The job is now gated with if: github.event.pull_request.head.repo.full_name == github.repository, so it runs only for same-repo PRs and skips fork PRs (which would not have the secret). The board automation only needs to cover same-repo PRs anyway.

@greptile-apps

greptile-apps Bot commented Jun 15, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

Adds a thin GitHub Actions caller workflow that opts BloomDesktop into the org-level PR Review Tracker board by forwarding pull_request events to the shared reusable workflow in BloomBooks/.github.

  • The fork guard (if: github.event.pull_request.head.repo.full_name == github.repository) correctly prevents failed runs on external contributor PRs where repo secrets are unavailable.
  • Only PR_REVIEW_TRACKER_PROJECT_TOKEN is forwarded to the callee — not all secrets — limiting blast radius if the upstream workflow is ever changed.

Important Files Changed

Filename Overview
.github/workflows/pr-review.yml New caller workflow that forwards pull_request events to the shared PR Review Tracker reusable workflow; uses explicit secret mapping (not secrets: inherit) and correctly guards against fork PRs.

Reviews (3): Last reviewed commit: "Rename secret to PR_REVIEW_TRACKER_PROJE..." | Re-trigger Greptile

Comment thread .github/workflows/pr-review.yml
Comment thread .github/workflows/pr-review.yml Outdated
hatton and others added 2 commits June 15, 2026 16:50
- Skip fork PRs (they don't receive secrets, so PROJECT_TOKEN would be empty and the run would fail). BloomDesktop is public and gets fork PRs.

- Pass only PROJECT_TOKEN instead of secrets: inherit, to limit blast radius.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
More descriptive org secret name; must match the reusable workflow's declared secret.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@hatton hatton merged commit 80114c0 into master Jun 15, 2026
@hatton hatton deleted the add-pr-review-tracker-caller branch June 15, 2026 23:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants