ROX-31146: Reduce spam of Konflux PRs, releasers can approve#17968
ROX-31146: Reduce spam of Konflux PRs, releasers can approve#17968
Conversation
There was a problem hiding this comment.
Hey there - I've reviewed your changes - here's some feedback:
- Since this workflow relies on
RHACS_BOT_GITHUB_TOKEN, consider adding a guard likeif: github.event.pull_request.head.repo.full_name == github.repositoryat the job level to avoid unnecessary failures on PRs from forks where the secret is unavailable. - To make the intent clearer and avoid accidental triggering in other review-request scenarios, you could explicitly check the action type in the job condition (e.g.
if: github.event.action == 'review_requested' && github.event.requested_team.name == 'konflux-maintainers-no-email' && github.event.pull_request.user.login != 'red-hat-konflux[bot]').
Prompt for AI Agents
Please address the comments from this code review:
## Overall Comments
- Since this workflow relies on `RHACS_BOT_GITHUB_TOKEN`, consider adding a guard like `if: github.event.pull_request.head.repo.full_name == github.repository` at the job level to avoid unnecessary failures on PRs from forks where the secret is unavailable.
- To make the intent clearer and avoid accidental triggering in other review-request scenarios, you could explicitly check the action type in the job condition (e.g. `if: github.event.action == 'review_requested' && github.event.requested_team.name == 'konflux-maintainers-no-email' && github.event.pull_request.user.login != 'red-hat-konflux[bot]'`).Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.
|
Images are ready for the commit at 2d5bcee. To use with deploy scripts, first |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #17968 +/- ##
==========================================
- Coverage 49.48% 49.45% -0.04%
==========================================
Files 2697 2699 +2
Lines 198048 198270 +222
==========================================
+ Hits 98010 98060 +50
- Misses 92402 92605 +203
+ Partials 7636 7605 -31
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
|
https://github.com/stackrox/mishas-operator-index-fork/actions/runs/19868379156/job/56937179337?pr=1
https://github.com/stackrox/mishas-operator-index-fork/pull/1 Note: both links will stop working as I plan to delete that test repo. |


Description
Same as stackrox/scanner#2438 and stackrox/collector#2693 but applied to StackRox.
We don't have
auto-approveworkflow here but we still need@rhacs-botto be the codeowner. Otherwise no-notification magic won't work. Perhaps we'll add auto-approve in the future.User-facing documentation
Testing and quality
Automated testing
No change.
How I validated my change
Tested on the Scanner repo before. Also tested the updated command on a fork.