claude-botandClaude Opus 5.5
5528ccbd0b
Pipeline branch filters and PR bases, Flux GitRepository ref, image automation checkout and push, restore-test, vmtest and bootstrap.sh. Merge right before the master -> main rename. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
48 lines
2.2 KiB
YAML
48 lines
2.2 KiB
YAML
# DISABLED: the review-bot service (review-bot/, deployed from kubernetes/apps/review-bot/) reviews
|
|
# pull requests. This pipeline only starts when triggered by hand and is kept for reference.
|
|
#
|
|
# PR review bot — per-repo STUB. All logic lives centrally in
|
|
# konairius/homelab: ci/agents/pr-review/run.sh (plus prompt.md,
|
|
# settings.json and scripts/ci/). This file is deployed byte-identical into every
|
|
# reviewed repo (konairius/homelab, shelly-manager, authentik-samba-bridge,
|
|
# homeassistant) and holds NO logic, so the copies cannot drift apart: change the
|
|
# review in homelab and every repo picks it up on its next PR event. Only edit this
|
|
# stub if the trigger, the image or the secrets change — then change all copies in
|
|
# one go.
|
|
#
|
|
# Triggers on pull_request: PR opened AND new commits pushed to an open PR.
|
|
# Approves only when the review found nothing red/yellow (see run.sh); humans merge.
|
|
#
|
|
# The central code is cloned from public homelab@main on every run, never taken
|
|
# from the PR checkout, so a PR cannot alter the rubric or helper scripts it is
|
|
# reviewed with.
|
|
#
|
|
# Image: ci-claude:latest — the refresh pipeline keeps it on current Claude Code,
|
|
# and a pinned tag would be the one thing in this file that diverges per repo.
|
|
#
|
|
# Secrets (both must be granted the pull_request event):
|
|
# mistral_api_key -> MISTRAL_API_KEY (Mistral Conversations API)
|
|
# review_bot_token -> REVIEW_TOKEN (review-bot PAT, write:repository)
|
|
# Claude CLI path disabled: claude_code_oauth_token -> CLAUDE_CODE_OAUTH_TOKEN
|
|
#
|
|
# (Note: keep literal dollar-brace out of THIS file, even in comments — Woodpecker
|
|
# runs its variable substitution over the whole YAML text.)
|
|
when:
|
|
- event: manual
|
|
|
|
steps:
|
|
- name: pr-review-agent
|
|
image: gitea.renner.uno/gitea_admin/ci-claude:latest
|
|
pull: true
|
|
environment:
|
|
# CLAUDE_CODE_OAUTH_TOKEN:
|
|
# from_secret: claude_code_oauth_token
|
|
MISTRAL_API_KEY:
|
|
from_secret: mistral_api_key
|
|
REVIEW_TOKEN:
|
|
from_secret: review_bot_token
|
|
commands:
|
|
- rm -rf /tmp/pr-review-central
|
|
- git clone --quiet --depth 1 https://gitea.renner.uno/konairius/homelab /tmp/pr-review-central
|
|
- sh /tmp/pr-review-central/ci/agents/pr-review/run.sh
|