8000 ROX-31146: Reduce spam of Konflux PRs, releasers can approve by msugakov · Pull Request #17968 · stackrox/stackrox · GitHub
[go: up one dir, main page]

Skip to content

ROX-31146: Reduce spam of Konflux PRs, releasers can approve#17968

Merged
msugakov merged 4 commits intomasterfrom
misha/ROX-31146-reduce-konflux-spam
Dec 3, 2025
Merged

ROX-31146: Reduce spam of Konflux PRs, releasers can approve#17968
msugakov merged 4 commits intomasterfrom
misha/ROX-31146-reduce-konflux-spam

Conversation

@msugakov
Copy link
Contributor
@msugakov msugakov commented Nov 26, 2025

Description

Same as stackrox/scanner#2438 and stackrox/collector#2693 but applied to StackRox.
We don't have auto-approve workflow here but we still need @rhacs-bot to be the codeowner. Otherwise no-notification magic won't work. Perhaps we'll add auto-approve in the future.

User-facing documentation

Testing and quality

  • the change is production ready: the change is GA, or otherwise the functionality is gated by a feature flag
  • CI results are inspected

Automated testing

No change.

How I validated my change

Tested on the Scanner repo before. Also tested the updated command on a fork.

Copy link
Contributor
@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey there - I've reviewed your changes - here's some feedback:

  • Since this workflow relies on RHACS_BOT_GITHUB_TOKEN, consider adding a guard like if: github.event.pull_request.head.repo.full_name == github.repository at the job level to avoid unnecessary failures on PRs from forks where the secret is unavailable.
  • To make the intent clearer and avoid accidental triggering in other review-request scenarios, you could explicitly check the action type in the job condition (e.g. if: github.event.action == 'review_requested' && github.event.requested_team.name == 'konflux-maintainers-no-email' && github.event.pull_request.user.login != 'red-hat-konflux[bot]').
Prompt for AI Agents
Please address the comments from this code review:

## Overall Comments
- Since this workflow relies on `RHACS_BOT_GITHUB_TOKEN`, consider adding a guard like `if: github.event.pull_request.head.repo.full_name == github.repository` at the job level to avoid unnecessary failures on PRs from forks where the secret is unavailable.
- To make the intent clearer and avoid accidental triggering in other review-request scenarios, you could explicitly check the action type in the job condition (e.g. `if: github.event.action == 'review_requested' && github.event.requested_team.name == 'konflux-maintainers-no-email' && github.event.pull_request.user.login != 'red-hat-konflux[bot]'`).

Sourcery is free for open source - if you like our reviews please consider sharing them ✨
Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.

@msugakov msugakov requested a review from vjwilson November 26, 2025 14:20
@rhacs-bot
Copy link
Contributor
rhacs-bot commented Nov 26, 2025

Images are ready for the commit at 2d5bcee.

To use with deploy scripts, first export MAIN_IMAGE_TAG=4.10.x-444-g2d5bcee94a.

@codecov
Copy link
codecov bot commented Nov 26, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 49.45%. Comparing base (197fcee) to head (2d5bcee).
⚠️ Report is 42 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #17968      +/-   ##
==========================================
- Coverage   49.48%   49.45%   -0.04%     
==========================================
  Files        2697     2699       +2     
  Lines      198048   198270     +222     
==========================================
+ Hits        98010    98060      +50     
- Misses      92402    92605     +203     
+ Partials     7636     7605      -31     
Flag Coverage Δ
go-unit-tests 49.45% <ø> (-0.04%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@msugakov
Copy link
Contributor Author
msugakov commented Dec 2, 2025

Tested gh pr edit approach:
image

https://github.com/stackrox/mishas-operator-index-fork/actions/runs/19868379156/job/56937179337?pr=1

image

https://github.com/stackrox/mishas-operator-index-fork/pull/1

Note: both links will stop working as I plan to delete that test repo.

@msugakov msugakov requested a review from janisz December 2, 2025 17:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

0