Skip to content

fix(ci): repoint io-triage to wave-foundation-public mirror - #41

Merged
yakimoto merged 1 commit into
mainfrom
fix/repoint-io-triage-to-mirror
Sep 1, 2026
Merged

fix(ci): repoint io-triage to wave-foundation-public mirror#41
yakimoto merged 1 commit into
mainfrom
fix/repoint-io-triage-to-mirror

Conversation

@yakimoto

@yakimoto yakimoto commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

Repoints .github/workflows/issue-ops-triage.yml from the private wave-av/wave-foundation repo to the published public mirror wave-av/wave-foundation-public.

Symptom. This is a public repo. Actions -> issue-ops-triage shows 15 consecutive failure conclusions on the issues event (most recent 2026-08-30). Every run fails with zero jobs and zero logs - it never showed as a check anywhere, because it is not triggered on pull_request, it is triggered on issues, so there was no PR check rollup to notice it in either. Issue triage has effectively never worked on this repo.

Cause. A public repo cannot uses: a reusable workflow hosted in a private repo (wave-av/wave-foundation). GitHub Actions refuses the job before it starts (startup_failure) - no job list, no log output, nothing actionable in the UI beyond the bare failed run.

Fix - three pointers, all required together:

  1. uses: -> wave-av/wave-foundation-public/.github/workflows/io-triage.yml@f63b91566ab311b09599db6195da8c353cab1f69
  2. scripts_repo: -> wave-av/wave-foundation-public
  3. scripts_ref: -> "f63b91566ab311b09599db6195da8c353cab1f69"

scripts_repo/scripts_ref are not optional companions to uses: - io-triage.yml does not embed its scripts; it does a sparse-checkout of scripts/issue-ops from scripts_repo at scripts_ref and executes them at runtime. Moving only uses: clears the startup_failure and then fails one step later on a checkout of a private repo the caller repo token cannot read. All three must move together, to the same pinned SHA.

This exact fix is proven green on the pilot repo (wave-av/adk, first success in 9 runs all-time, 2026-09-01T13:07) after all seven scripts in the io-triage dependency closure were published to the mirror.

Verify after merge (by run outcome, not the PR check rollup - this workflow does not run on pull_request):

gh run list --repo wave-av/.github --workflow issue-ops-triage.yml --json conclusion

Expect a success (or at minimum no startup_failure) on the next issues: opened/edited event.

Change is scoped to exactly these three YAML values; nothing else in the file was touched.


Note

Low Risk
Single-file CI pointer update with no application or auth logic changes; same bot app secrets and issue permissions as before.

Overview
Fixes issue-ops triage on this public repo by repointing all three dependencies on the private wave-av/wave-foundation workflow/scripts to the public mirror wave-av/wave-foundation-public, pinned at f63b91566ab311b09599db6195da8c353cab1f69.

The reusable job uses: path, plus scripts_repo and scripts_ref (used at runtime for sparse-checkout of scripts/issue-ops), must all move together—public repos cannot call reusable workflows in private repos, which caused immediate startup_failure with no logs.

No other workflow inputs, permissions, or secrets change.

Reviewed by Cursor Bugbot for commit 7841ec8. Bugbot is set up for automated code reviews on this repo. Configure here.


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

Summary by Sourcery

Repoint issue-operation triage to the pinned public workflow and script mirror so issue events can execute successfully.

Bug Fixes:

  • Restore issue-operation triage for the public repository by replacing inaccessible private reusable workflow and script sources with the published public mirror.

CI:

  • Pin the reusable triage workflow and its runtime scripts to the same commit in the public mirror.

Review in cubic

The public->private uses: reference produces a startup_failure with no
jobs, no logs, and no visible check - it is invisible on issue events.

Repoint all three pointers (uses/scripts_repo/scripts_ref) to the
published mirror at the pinned SHA.
@codeant-ai

codeant-ai Bot commented Sep 1, 2026

Copy link
Copy Markdown

Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI.

@qodo-code-review

Copy link
Copy Markdown

ⓘ Qodo reviews are paused because your workspace is out of credits. Ask your workspace admin to add credits to resume reviews. Manage billing

@sourcery-ai sourcery-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry @yakimoto, this account has used its review budget of 2,500,000 diff characters for the last 7 days.

You can request another review in 1 day and 4 hours by commenting @sourcery-ai review.

@cursor

cursor Bot commented Sep 1, 2026

Copy link
Copy Markdown

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_59fb38b3-1e48-4392-ada0-c28f063686a7)

@sourcery-ai

sourcery-ai Bot commented Sep 1, 2026

Copy link
Copy Markdown
Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

Fixes issue triage startup failures in this public repository by aligning all three workflow and script-source references with the public mirror, pinned to the same commit; reviewers should verify a successful or non-startup-failure run after an issue event.

File-Level Changes

Change Details Files
Repoint the issue triage reusable workflow and its runtime script checkout from the private repository to the public mirror at one shared pinned commit.
  • Update the reusable workflow reference to the public mirror.
  • Update the script repository and checkout ref to the same public-mirror SHA.
  • Leave triggers, permissions, conditions, inputs, and secrets unchanged.
.github/workflows/issue-ops-triage.yml

Possibly linked issues


Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

@coderabbitai

coderabbitai Bot commented Sep 1, 2026

Copy link
Copy Markdown

Review Change Stack

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Team

Run ID: dac46421-79b7-4f8f-a5c5-2ec43ad6737b

📥 Commits

Reviewing files that changed from the base of the PR and between 7ecb432 and 7841ec8.

📒 Files selected for processing (1)
  • .github/workflows/issue-ops-triage.yml

Included review availability: 0 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

📜 Recent review details
⏰ Context from checks skipped due to timeout. (4)
  • GitHub Check: semgrep-cloud-platform/scan
  • GitHub Check: Macroscope - Approvability Check
  • GitHub Check: pr_agent
  • GitHub Check: semgrep-cloud-platform/scan
🧰 Additional context used
🪛 zizmor (1.29.0)
.github/workflows/issue-ops-triage.yml

[warning] 19-19: permissions without explanatory comments (undocumented-permissions): needs an explanatory comment

(undocumented-permissions)

🔇 Additional comments (3)
.github/workflows/issue-ops-triage.yml (3)

16-16: LGTM!

Also applies to: 22-22


21-21: 🩺 Stability & Availability

No workflow defect established. App installation coverage is managed in GitHub App settings, not in this workflow. The available source does not show that wave-av/wave-foundation-public is outside the App installation scope.


21-21: 🔒 Security & Privacy

Verify the downstream authorization for trust:member. The pinned workflow defaults to OWNER MEMBER COLLABORATOR, and the trust script warns that public repositories should tighten this setting. The downstream authorization behavior is not present in this repository or the public mirror. Confirm whether trust:member can authorize runner or agent stages.


📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Updated issue triage automation to use the latest shared workflow configuration.
    • Improved consistency and reliability of automated issue handling.

Walkthrough

The issue triage job now uses the public io-triage.yml reusable workflow from wave-av/wave-foundation-public at a pinned commit. Existing permissions and inputs remain unchanged.

Changes

Issue triage workflow

Layer / File(s) Summary
Update reusable workflow reference
.github/workflows/issue-ops-triage.yml
The triage job now references wave-av/wave-foundation-public at commit f63b91566ab311b09599db6195da8c353cab1f69. Permissions and other inputs remain unchanged.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: 🔵 Low · up to 7841e

This change restores issue triage by switching the workflow and scripts to a pinned public mirror. A failed or cancelled edited-issue run could still leave stale approval labels because cleanup happens after triage, so the PR is mergeable with explicit owner awareness and follow-up.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and concisely describes the main change: repointing the issue triage workflow to the public mirror.
Description check ✅ Passed The description clearly explains the problem, cause, fix, affected references, validation approach, and scope. It does not include the template's explicit Type of change or Checklist sections, but the…
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Full details: Description check

Explanation

The description clearly explains the problem, cause, fix, affected references, validation approach, and scope. It does not include the template's explicit Type of change or Checklist sections, but the required change information is otherwise complete and on topic.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/repoint-io-triage-to-mirror
✨ Simplify code
  • Create PR with simplified code
  • Commit simplified code in branch fix/repoint-io-triage-to-mirror

Comment @coderabbitai help to get the list of available commands.

@gitar-bot

gitar-bot Bot commented Sep 1, 2026

Copy link
Copy Markdown
Code Review ✅ Approved

Fixes issue-ops triage on this public repo by repointing the reusable workflow uses: path, scripts_repo, and scripts_ref from the private wave-av/wave-foundation to the public mirror wave-av/wave-foundation-public pinned at f63b91566ab311b09599db6195da8c353cab1f69. Public repos cannot invoke reusable workflows in private repos, which caused startup_failure with no logs; all three pointers must move together to resolve the runtime sparse-checkout. No issues found.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply Compact
gitar auto-apply:on         
gitar display:verbose         

Was this helpful? React with 👍 / 👎 | Gitar

@macroscopeapp

macroscopeapp Bot commented Sep 1, 2026

Copy link
Copy Markdown

Approvability

Verdict: Would Approve

Macroscope's review found this PR approvable — This is a narrowly scoped CI fix that repoints an existing issue-triage workflow and its runtime scripts to a matching immutable commit in the public mirror. It preserves the existing triggers, permissions, secrets, and configuration while allowing the previously failing workflow to run.

Not approved because:

  • Credit balance exhausted. Approvability relies on correctness review in order to determine eligibility

Review your spending limits in Billing settings. You can add or adjust custom eligibility rules. Learn more.

@github-actions

github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪
🧪 No relevant tests
🔒 No security concerns identified
⚡ No major issues detected

@github-actions

github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown

PR Code Suggestions ✨

No code suggestions found for the PR.

@yakimoto
yakimoto merged commit aa56263 into main Sep 1, 2026
18 checks passed
@yakimoto
yakimoto deleted the fix/repoint-io-triage-to-mirror branch September 1, 2026 14:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant