feat(publish): check Linear access and skip recorded issues - #486
feat(publish): check Linear access and skip recorded issues#486mldangelo-oai wants to merge 9 commits into
Conversation
|
Codex Review: Didn't find any major issues. Swish! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
|
Security review completed. No security issues were found in this pull request. Reviewed commit: Only the user who started this review can view the report in Codex. ℹ️ About Codex security reviews in GitHubThis is an experimental Codex feature. Security reviews are triggered when:
Once complete, Codex will leave suggestions, or a comment if no findings are found. |
|
Security review completed. No security issues were found in this pull request. Reviewed commit: Only the user who started this review can view the report in Codex. ℹ️ About Codex security reviews in GitHubThis is an experimental Codex feature. Security reviews are triggered when:
Once complete, Codex will leave suggestions, or a comment if no findings are found. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 6b47211542
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
Codex Review: Didn't find any major issues. Another round soon, please! Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
|
Security review completed. No security issues were found in this pull request. Reviewed commit: Only the user who started this review can view the report in Codex. ℹ️ About Codex security reviews in GitHubThis is an experimental Codex feature. Security reviews are triggered when:
Once complete, Codex will leave suggestions, or a comment if no findings are found. |
|
Codex Review: Didn't find any major issues. What shall we delve into next? Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
|
Security review completed. No security issues were found in this pull request. Reviewed commit: Only the user who started this review can view the report in Codex. ℹ️ About Codex security reviews in GitHubThis is an experimental Codex feature. Security reviews are triggered when:
Once complete, Codex will leave suggestions, or a comment if no findings are found. |
zcrab-oai
left a comment
zcrab-oai
left a comment
There was a problem hiding this comment.
Reviewed read-only publication checks, resumable destination identity, cancellation, and partial recovery.
|
@codex review Please review current head |
|
Codex Review: Didn't find any major issues. Chef's kiss. Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
|
Security review completed. No security issues were found in this pull request. Reviewed commit: Only the user who started this review can view the report in Codex. ℹ️ About Codex security reviews in GitHubThis is an experimental Codex feature. Security reviews are triggered when:
Once complete, Codex will leave suggestions, or a comment if no findings are found. |
mldangelo-oai
changed the title
|
@codex review Please review exact head |
|
@codex security review Please review exact head |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
Codex Review: Something went wrong. Try again later by commenting “@codex review”. ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
|
Codex Review: Didn't find any major issues. Bravo. Reviewed commit: ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
If Codex has suggestions, it will comment; otherwise it will react with 👍. Codex can also answer questions or update the PR. Try commenting "@codex address that feedback". |
2 participants
Summary
After a partial publication, rerunning
publish scanrecreates successes already recorded locally. Add a read-only preflight and an opt-in way to skip findings recorded for the same scan occurrence and Linear destination. The default publish behavior remains unchanged.Changes
codex-security publish check SCAN_DIR --to linear --linear-team TEAM_IDfor local history validation and optional read-only Linear access checks. The existing project, API-key, and assignee options keep their current environment-variable defaults. Without an API key, remote access is reported asnot-checked; issue creation is never tested.--skip-existingtopublish scan. It defaults tofalseand skips only local records that match the exact scan occurrence, team, and optional project.checkScanPublicationand theskipExistingSDK option with the same behavior.0.1.37and verify a cached0.1.22bundle refreshes before the new history command is used.The existing dry run previews issue content but does not validate recorded publication history or destination access. A separate read-only check avoids changing publish behavior, while the opt-in flag preserves intentional republishing and compatibility for existing callers.
Testing
Checks on
025fc60acbdd2855f4f995248d7b5552546a2c2d:pnpm run types,pnpm run format, Ruff, andgit diff --check: passed.pnpm run build, package archive checks, and installed-package smoke: passed with 255 archive entries and 111 bundled plugin files.Native Windows behavior remains delegated to hosted CI. Hosted checks were not awaited before moving to the next PR.
Risk and rollout
Skipping recorded issues is opt-in. Local history does not prove that a remote issue still exists, and the preflight does not recover retained handoffs or prove issue-creation permission. Concurrent publishers and unrecorded remote operations can still create duplicates. There is no schema migration or dependency change, and no live Linear issues were created during testing. The bundle identity change refreshes cached preview contents but does not publish a package or deploy anything.
Public disclosure review
Previously published commits retain contributor corporate-email metadata, and existing automated comments contain requester-only report references. They are not reproduced here, and the second attestation remains unchecked because they are already part of the public PR history.