ci: add repo-card refresh stub (MIX-181) - #43
Conversation
WalkthroughAdds a new GitHub Actions workflow file, Estimated code review effort: 1 (Trivial) | ~5 minutes Related PRs: None mentioned. Suggested labels: ci, github-actions Suggested reviewers: None specified. 🐰
🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
There was a problem hiding this comment.
🧹 Nitpick comments (1)
.github/workflows/refresh-repo-card.yml (1)
22-22: 🔒 Security & Privacy | 🔵 Trivial | ⚡ Quick winPinning the reusable workflow to
@mainis a mutable reference.
uses: mixmaxhq/github-workflows/.github/workflows/refresh_repo_card.yml@maintracks a moving branch, so future changes to that shared workflow (including breaking ones) will silently affect this workflow's next scheduled run. Pinning to a release tag or commit SHA improves reproducibility and supply-chain hygiene, even for an internal org repo.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In @.github/workflows/refresh-repo-card.yml at line 22, The reusable workflow reference in the refresh-repo-card workflow is pinned to a mutable branch, so update the uses entry for mixmaxhq/github-workflows/.github/workflows/refresh_repo_card.yml to a fixed release tag or commit SHA instead of `@main`. Keep the same workflow target, but choose an immutable ref so scheduled runs use a reproducible version and are not affected by upstream branch changes.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Nitpick comments:
In @.github/workflows/refresh-repo-card.yml:
- Line 22: The reusable workflow reference in the refresh-repo-card workflow is
pinned to a mutable branch, so update the uses entry for
mixmaxhq/github-workflows/.github/workflows/refresh_repo_card.yml to a fixed
release tag or commit SHA instead of `@main`. Keep the same workflow target, but
choose an immutable ref so scheduled runs use a reproducible version and are not
affected by upstream branch changes.
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro
Run ID: 70b6c495-9623-4418-a833-a4c15c4504bf
📒 Files selected for processing (1)
.github/workflows/refresh-repo-card.yml
Adds the shared nightly repo-card refresh (MIX-181). Delegates all logic to
mixmaxhq/github-workflows/.github/workflows/refresh_repo_card.yml@main; opens a human-revieweddocs:PR only when this repo's CLAUDE.md goes stale. No auto-merge; no CODEOWNERS needed (the card PR is assigned to the code's authors). Manual full re-derive available via themode: fulldispatch input.