Skip to content

Temporarily harden PR review workflow#104

Draft
enyst wants to merge 2 commits intomainfrom
openhands/pull-request-pr-review-workflow
Draft

Temporarily harden PR review workflow#104
enyst wants to merge 2 commits intomainfrom
openhands/pull-request-pr-review-workflow

Conversation

@enyst
Copy link
Collaborator

@enyst enyst commented Mar 12, 2026

Summary

  • switch the PR review workflow from pull_request_target to pull_request as a temporary hardening measure
  • skip fork PRs and match the event gating used in OpenHands/software-agent-sdk main
  • pass extensions-version: ${{ github.event.pull_request.head.sha }} so extensions PRs exercise their own plugin changes
  • update the PR review README to document the temporary fork limitation

Validation

  • uv run --with pyyaml python to parse both workflow files and assert the expected trigger, permissions, guard, and extensions-version input
  • git diff --check -- .github/workflows/pr-review-by-openhands.yml plugins/pr-review/workflows/pr-review-by-openhands.yml plugins/pr-review/README.md

enyst and others added 2 commits March 12, 2026 14:42
Co-authored-by: openhands <openhands@all-hands.dev>
Co-authored-by: openhands <openhands@all-hands.dev>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants