33fdd3d44e
test(ci): scope bossbot untrusted-head guard to dangerous PR fields
...
The guard banned any github.event.pull_request reference, but the
recheck job legitimately needs the numeric PR id. Allow exactly
.number and keep forbidding head checkout and attacker-controlled
string fields.
Signed-off-by: phernandez <paul@basicmachines.co >
2026-06-09 23:31:14 -05:00
93494b8c13
ci(ci): gate bossbot on passing tests ( #937 )
...
Signed-off-by: phernandez <paul@basicmachines.co >
2026-06-09 20:47:34 -05:00
ec94feb6a4
Merge branch 'main' into codex/fix-bossbot-assets-publish
2026-06-09 19:23:27 -05:00
831b9141a5
ci(ci): use pytestmon and Depot runners ( #928 )
...
Signed-off-by: phernandez <paul@basicmachines.co >
2026-06-09 19:20:08 -05:00
2de19713f6
fix(ci): make BM Bossbot asset cleanup idempotent
...
Signed-off-by: phernandez <paul@basicmachines.co >
2026-06-09 19:14:13 -05:00
79fcfbce6a
fix(ci): restrict BM Bossbot to trusted PR authors
...
Signed-off-by: phernandez <paul@basicmachines.co >
2026-06-09 17:16:49 -05:00
62229d9d0a
fix(ci): address BM Bossbot PR feedback
...
Signed-off-by: phernandez <paul@basicmachines.co >
2026-06-09 15:55:36 -05:00
03ba268cb1
feat(ci): add BM Bossbot PR gate
...
Signed-off-by: phernandez <paul@basicmachines.co >
2026-06-09 15:18:40 -05:00
ce4b5d47a0
fix(skills): reject invalid frontmatter YAML ( #896 )
...
Signed-off-by: phernandez <paul@basicmachines.co >
2026-06-05 13:14:27 -05:00
8887267256
fix(ci): improve auto bm note narrative ( #893 )
...
Signed-off-by: phernandez <paul@basicmachines.co >
2026-06-04 22:34:57 -05:00
2de8183e85
fix(ci): require all codex synthesis schema fields
...
Fixes the Auto BM Codex structured-output schema guardrail so live synthesis can run.
2026-06-04 20:48:55 -05:00
4502bd3c3b
ci(cli): configure auto bm workflow
...
Signed-off-by: phernandez <paul@basicmachines.co >
2026-06-04 20:27:42 -05:00
16ba55d7b4
feat(cli): add auto bm github ci
...
Signed-off-by: phernandez <paul@basicmachines.co >
2026-06-04 20:14:59 -05:00
phernandez