ci: add pilot auto-dispatch entry points for approved PRs#32053
Open
gkarat wants to merge 6 commits into
openssl:masteropenssl/openssl:masterfrom
gkarat:ct-validation-dispatchgkarat/openssl:ct-validation-dispatchCopy head branch name to clipboard
Open
ci: add pilot auto-dispatch entry points for approved PRs#32053gkarat wants to merge 6 commits intoopenssl:masteropenssl/openssl:masterfrom gkarat:ct-validation-dispatchgkarat/openssl:ct-validation-dispatchCopy head branch name to clipboard
gkarat wants to merge 6 commits into
openssl:masteropenssl/openssl:masterfrom
gkarat:ct-validation-dispatchgkarat/openssl:ct-validation-dispatchCopy head branch name to clipboard
Conversation
Additive: schedule and bare-manual runs unchanged. Adds validated, fail-closed pr/head_sha/check_run_id inputs so a caller can dispatch against an exact commit; run-name echoes them back for correlation. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2 tasks
…st a PR head SHA Additive: schedule and bare-manual runs unchanged. Adds validated, fail-closed pr/head_sha/check_run_id inputs so a caller can dispatch each against an exact commit; run-name echoes them back for correlation. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Clarify the bot-only workflow inputs and validate any supplied tuple through a shared reusable workflow without interpolating input values into shell source. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
gkarat
marked this pull request as ready for review
July 23, 2026 13:20
gkarat
requested review from
a team,
bob-beck,
levitte,
nhorman,
npajkovsky and
t8m
July 23, 2026 13:20
mbroz
previously approved these changes
Jul 24, 2026
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
jogme
approved these changes
Jul 24, 2026
jogme
left a comment
Contributor
There was a problem hiding this comment.
LGTM, thank you!
For a little more context here: The CI will be dispatched by the ci_bot, therefore this PR adds only variables that helps the bot to be plumbed in to the workflows.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This is a pilot for automatically running selected CI workflows after a PR is approved.
The pilot intentionally includes only three workflows:
ct-validation-dailyrun-checker-dailyvalgrind-dailyIt covers only the automatic on-approval path. The proposed
/cicomment command for manually requesting CI will be implemented separately.For bot dispatches, the workflows accept the PR number, exact head SHA, and check-run ID. A shared reusable workflow rejects incomplete or malformed input before checkout. Jobs then check out the specified SHA with read-only permissions and without persisted credentials.
The run name carries the check-run correlation data, and PR-keyed concurrency cancels obsolete runs.
Existing scheduled and Actions-tab manual execution remain unchanged: leave the internal inputs empty to run normally. Existing fork behavior is also preserved.