Repository navigation
ci: skip code checks for documentation changes - #200
Conversation
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 78a1463dd4
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
@codex security review |
🛡️ Codex Security ReviewSecurity review completed. No security issues were found in this pull request. Reviewed commit: Only the user who started this review can view the report in Codex. ℹ️ About Codex security reviews in GitHubThis is an experimental Codex feature. Security reviews are triggered when:
Once complete, Codex will leave suggestions, or a comment if no findings are found. |
Ordinary documentation changes currently rebuild and test the application and release artifacts. This change skips those code steps for a conservative document allowlist while retaining document checks and all required job results.
A shared classifier reads the complete local Git diff, including deletions and mode changes. Code, schemas, scripts, workflows, dependencies, configuration, unknown paths, and uncertain history keep full checks. Tags and manual runs also keep full checks. The required release job explicitly fails when its frontend prerequisite fails or is cancelled. Existing document-history verification and branch protection are unchanged.
Validation: 89 Python classifier/document tests passed; both workflows passed actionlint. Real Git cases cover tested PR merge trees, new branches, missing revisions, renamed code, executable/symlink documents, UTF-8 filename validation, malformed event data, and more than 3,000 changed files. An earlier documentation-only push verified code steps were skipped while document checks passed. The complete PR and final review-fix push contain code and therefore run full verification. Test repositories disable detached maintenance; 100 cleanup repetitions passed with Git tracing confirming no automatic maintenance children.
The threat model and development documentation describe the resulting scope. Security review is required after a clean general review.