Skip to content

Install copilot PR reviewer workflow#926

Closed
stiber wants to merge 2 commits intomasterfrom
StiberDevelopment
Closed

Install copilot PR reviewer workflow#926
stiber wants to merge 2 commits intomasterfrom
StiberDevelopment

Conversation

@stiber
Copy link
Copy Markdown
Contributor

@stiber stiber commented Apr 13, 2026

Description

Add workflow to try to get copilot PR reviewing working by specifying when it will run and which model it will use.

Checklist (Mandatory for new features)

  • Added Documentation
  • Added Unit Tests

Testing (Mandatory for all changes)

  • GPU Test: test-medium-connected.xml Passed
  • GPU Test: test-large-long.xml Passed

stiber and others added 2 commits April 13, 2026 14:22
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a GitHub Actions workflow intended to run an automated Copilot-based pull request review, including configuration for trigger conditions and model settings.

Changes:

  • Added a new workflow that triggers on PR open/sync/reopen events.
  • Configured the workflow to run github/copilot-pr-reviewer@v1 with gpt-4.1 and specified generation parameters.

Comment on lines +3 to +6
on:
pull_request:
types: [opened, synchronize, reopened]

Copy link

Copilot AI Apr 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This workflow is triggered via pull_request but it depends on ${{ secrets.OPENAI_API_KEY }}. For pull requests coming from forks, GitHub Actions does not provide repository secrets, so the reviewer step will fail or be skipped. If you want this reviewer to work on fork PRs, consider using a pull_request_target-based design that avoids checking out/running untrusted PR code, or gate the job so it only runs when the secret is available (and/or when github.event.pull_request.head.repo.full_name == github.repository).

Copilot uses AI. Check for mistakes.
fetch-depth: 0

- name: Review with Copilot
uses: github/copilot-pr-reviewer@v1
Copy link

Copilot AI Apr 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The workflow grants pull-requests: write and uses a third-party action. Please pin github/copilot-pr-reviewer to an immutable commit SHA (instead of @v1) to reduce supply-chain risk from tag updates.

Suggested change
uses: github/copilot-pr-reviewer@v1
uses: github/copilot-pr-reviewer@<FULL_40_CHARACTER_COMMIT_SHA>

Copilot uses AI. Check for mistakes.
@stiber
Copy link
Copy Markdown
Contributor Author

stiber commented Apr 20, 2026

It appears that this workflow isn't necessary; something must have been fixed behind the scenes in GitHub. Commit will be reverted.

@stiber stiber closed this Apr 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants