From bc9b0fc7c889010b0d1edce6eeda2680dfd6f731 Mon Sep 17 00:00:00 2001 From: migrate-copilot-review Date: Fri, 8 May 2026 17:36:27 -0300 Subject: [PATCH] ci(copilot-review): migrate from gh-dagentic to release/@v1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The previous reusable workflow at arthur-debert/gh-dagentic/.github/workflows/copilot-review.yml@main authenticates with GITHUB_TOKEN, which is github-actions[bot] (Integration actor). Integration actors silently no-op Copilot review-attach: 'gh pr edit --add-reviewer @copilot' returns the PR URL with no error but adds nothing. release/@v1 requires the caller to pass a user PAT via secrets.gh_token. RELEASE_TOKEN already exists on this repo (or will once propagated), so wiring it through fixes the silent failure. Caught by bin/audit-smoke-test on arthur-debert/dodot — this commit sweeps the rest. --- .github/workflows/copilot-review.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/copilot-review.yml b/.github/workflows/copilot-review.yml index c04aeb1..1660704 100644 --- a/.github/workflows/copilot-review.yml +++ b/.github/workflows/copilot-review.yml @@ -10,6 +10,8 @@ jobs: permissions: contents: read pull-requests: write - uses: arthur-debert/gh-dagentic/.github/workflows/copilot-review.yml@main + uses: arthur-debert/release/.github/workflows/copilot-review.yml@v1 with: pr_number: ${{ github.event.pull_request.number }} + secrets: + gh_token: ${{ secrets.RELEASE_TOKEN }}