Skip to content

fix(review-pr): remove auto-review, require explicit reviewer request only #7

fix(review-pr): remove auto-review, require explicit reviewer request only

fix(review-pr): remove auto-review, require explicit reviewer request only #7

# Copyright The Docker Agent Action authors
# SPDX-License-Identifier: Apache-2.0
name: PR Review - Trigger
on:
pull_request:
types: [review_requested]
pull_request_review_comment:
types: [created]
permissions: {}
# Deduplicate simultaneous pull_request events for the same fork PR
# (e.g. multiple review_requested events firing at once for the same PR).
# Only the last trigger completes, producing a single workflow_run → one review.
# Distinct review comments stay independent (the comment id keys them into their
# own group) so a real reply is never dropped by another comment on the same PR.
concurrency:
group: pr-review-trigger-${{ github.event.pull_request.number || github.run_id }}-${{ github.event.comment.id || 'review-request' }}
cancel-in-progress: true
jobs:
save-context:
# Only run on fork PRs (same-repo PRs have full OIDC access and don't need
# the trigger-artifact path). Skip Bot-account senders (Dependabot, Renovate,
# etc.) early to save Actions minutes. Note: docker-agent is a User account,
# not a Bot, so it is not filtered here.
if: >
github.event.pull_request.head.repo.fork &&
github.event.sender.type != 'Bot' &&
github.event.comment.user.login != 'docker-agent' &&
github.event.comment.user.login != 'docker-agent[bot]' &&
github.event.comment.user.type != 'Bot' &&
!contains(github.event.comment.body, '<!-- docker-agent-review -->') &&
!contains(github.event.comment.body, '<!-- docker-agent-review-reply -->') &&
!contains(github.event.comment.body, '<!-- cagent-review -->') &&
!contains(github.event.comment.body, '<!-- cagent-review-reply -->')
runs-on: ubuntu-latest
steps:
- name: Save event context
env:
PR_NUMBER: ${{ github.event.pull_request.number }}
PR_HEAD_SHA: ${{ github.event.pull_request.head.sha }}
COMMENT_JSON: ${{ toJSON(github.event.comment) }}
run: |
mkdir -p context
printf '%s' "${{ github.event_name }}" > context/event_name.txt
printf '%s' "$PR_NUMBER" > context/pr_number.txt
printf '%s' "$PR_HEAD_SHA" > context/pr_head_sha.txt
if [ "${{ github.event_name }}" = "pull_request_review_comment" ]; then
printf '%s' "$COMMENT_JSON" > context/comment.json
fi
- name: Upload context
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: pr-review-context
path: context/
retention-days: 1