Skip to content

ci(actions): reduce pull request runner contention - #663

Draft
seonghobae wants to merge 7 commits into
developfrom
codex/actions-concurrency
Draft

ci(actions): reduce pull request runner contention#663
seonghobae wants to merge 7 commits into
developfrom
codex/actions-concurrency

Conversation

@seonghobae

@seonghobae seonghobae commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

Current exact boundary

  • protected/base: develop@2c328875e00e86537df3e965170be80532571cad
  • exact head: 1e35d347ea69d7dcc298e5c35a5d64764b8b5674
  • ancestry: ahead 7 / behind 0, merge base exactly protected develop
  • state: Draft/open. No predecessor check result transfers after the head moved.

Causal workflow repair

This lane removes repository-local CodeQL, dependency-review, and OSV registrations that duplicate organization-required security/SCA ownership, keeps ScopeWeave-specific Server Tests/Fuzz/Pages ownership local, and makes product validation concurrency trigger-aware. Pages uses one stable workflow/repository concurrency group with cancel-in-progress: false, so deployments serialize instead of allowing an older run to publish after a newer one.

The workflow-ownership contract remains fail closed: deleted central-only workflow files are forbidden locally, while product/runtime validation and Pages deployment remain repository-owned.

Review RED -> docs GREEN

Current review found that source ownership changed while ARCHITECTURE.md, CLAUDE.md, and README.md still named deleted local SCA workflows as authoritative. That is a valid code-current documentation defect.

  • RED ac62d97a02cf043d53cf79fc8d5f592077fc0acc extends tests/config/test_strix_static_repo_adaptations.py so the three current architecture/agent/public docs may not name deleted codeql.yml, dependency-review.yml, or osvscanner.yml, and must identify CodeQL, Dependency Review, OSV, and ContextualWisdomLab/.github ownership.
  • GREEN descendants 6e967af3fa76f2cfe1ec5adc5ed68dae8f14e58c, 03e954f953a233b82d32ed4b03790157d3730886, and final 1e35d347ea69d7dcc298e5c35a5d64764b8b5674 update ARCHITECTURE.md, CLAUDE.md, and README.md to the same ownership model. The docs now describe repository-local Server Tests/Fuzz/Pages separately from central OpenCode/Strix/PR scheduler/CodeQL/Dependency Review/OSV/Security Scan.

No product behavior, release artifact, branch protection, required-check threshold, or scanner success condition is weakened by the documentation repair.

Exact-head evidence

Fresh pull-request workflow materialization exists on 1e35d347...:

  • Fuzz 33895832225: queued
  • Server Tests 33895832019: queued
  • SAST Semgrep 33895832117: queued
  • CodeQL PR 33895831834: queued
  • Security Scan 33895831996: queued

Queued is non-passing. Keep Draft until one unchanged exact head has terminal product/security/SAST/CodeQL/governance evidence, zero valid unresolved findings, and then-live review/protection requirements. Do not use predecessor results, no-op retriggers, self-approval, administrator bypass, force-push, destructive rebase, or gate weakening.

Signed-off-by: Seongho Bae <me@seonghobae.me>

Commit-Message-Assisted-by: Codex
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 4, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review Completed 2026-09-04T14:49:46.783025Z 232daf7 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@coderabbitai

coderabbitai Bot commented Sep 4, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: 52003b6a-4bf7-4e18-8a9d-798cbb6721e5

📥 Commits

Reviewing files that changed from the base of the PR and between 2c32887 and 9fcf0a2.

📒 Files selected for processing (7)
  • .github/workflows/codeql.yml
  • .github/workflows/dependency-review.yml
  • .github/workflows/fuzz.yml
  • .github/workflows/osvscanner.yml
  • .github/workflows/pages.yml
  • .github/workflows/server-tests.yml
  • tests/config/test_strix_static_repo_adaptations.py
💤 Files with no reviewable changes (3)
  • .github/workflows/codeql.yml
  • .github/workflows/osvscanner.yml
  • .github/workflows/dependency-review.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.


📝 Walkthrough

Walkthrough

CI 워크플로 세 개의 동시성 정책을 변경하고, CodeQL·Dependency Review·OSV Scanner 워크플로를 삭제했습니다. 정적 저장소 검증 테스트는 새 동시성 정책과 중앙 관리 워크플로 목록을 검사하도록 갱신했습니다.

Changes

CI 워크플로 정책 변경

Layer / File(s) Summary
워크플로 동시성 정책 조정
.github/workflows/fuzz.yml, .github/workflows/server-tests.yml, .github/workflows/pages.yml
Fuzz 및 서버 테스트는 PR 번호 또는 실행 ID를 포함하는 동시성 그룹을 사용합니다. 실행 취소는 PR 이벤트에서만 활성화됩니다. Pages 배포는 워크플로 및 저장소별 그룹을 사용하며 실행 중인 배포를 취소하지 않습니다.
보안 검사 워크플로 및 검증 테스트 갱신
.github/workflows/codeql.yml, .github/workflows/dependency-review.yml, .github/workflows/osvscanner.yml, tests/config/test_strix_static_repo_adaptations.py
CodeQL, Dependency Review, OSV Scanner 워크플로를 삭제했습니다. 정적 검증 테스트는 CodeQL을 중앙 관리 목록에 추가하고, 동시성 설정을 검사하도록 변경했습니다.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk: ⚪ Minimal · up to 9fcf0

CI now cancels superseded pull-request validation runs while preserving non-PR runs and serializing Pages deployments without cancellation. The workflow and validation updates are ready to merge with no identified remaining risk.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Docstring Coverage ⚠️ Warning Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 3 functions across 1 files. (3 skipped: 3 … Write docstrings for the functions missing them to satisfy the coverage threshold.
✅ Passed checks (4 passed)
Check name Status Explanation
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed PR 제목은 검증 워크플로의 동시 실행을 조정하고 삭제하여 pull request runner contention을 줄이는 주요 변경 사항을 정확히 요약합니다.
Full details: Docstring Coverage

Explanation

Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 3 functions across 1 files. (3 skipped: 3 unsupported.)

  • Fix all pre-merge checks with AI
✨ Finishing Touches 💡 1
📝 Generate docstrings 💡
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch codex/actions-concurrency

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Signed-off-by: Seongho Bae <me@seonghobae.me>

Commit-Message-Assisted-by: Codex
@seonghobae
seonghobae enabled auto-merge (squash) September 4, 2026 14:47

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 232daf73ef

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/pages.yml Outdated
Comment thread tests/config/test_strix_static_repo_adaptations.py
@seonghobae
seonghobae marked this pull request as draft September 4, 2026 16:34
auto-merge was automatically disabled September 4, 2026 16:34

Pull request was converted to draft

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant