Skip to content

Trigger new CI runs on bot-generated commits#123

Merged
knoepfel merged 2 commits intomainfrom
jules-maintenance-trigger-ci-on-bot-commits
Nov 20, 2025
Merged

Trigger new CI runs on bot-generated commits#123
knoepfel merged 2 commits intomainfrom
jules-maintenance-trigger-ci-on-bot-commits

Conversation

@greenc-FNAL
Copy link
Copy Markdown
Contributor

@greenc-FNAL greenc-FNAL commented Nov 19, 2025

  • maintenance: Trigger CI runs on bot-generated commits
  • maintenance: Align CI workflow triggers for consistency

Modifies the `clang-format-fix`, `cmake-format-fix`, and `clang-tidy-fix` workflows to use a Personal Access Token (PAT) instead of the default `GITHUB_TOKEN` when committing changes.

This is necessary to ensure that commits made by the `@phlexbot` automatically trigger a new run of all CI checks, which is required to satisfy branch protection rules that mandate all checks pass on the most recent commit.

The workflows now expect a repository secret named `WORKFLOW_PAT` to be available.
This commit updates the `clang-format-check`, `clang-tidy-check`, `cmake-format-check`, and `coverage` workflows to ensure consistent behavior on manual triggers.

The `if` conditions for the main jobs have been modified to include a bypass for the relevance-detection logic when the workflow is triggered via `workflow_dispatch` or a local `act` run. This aligns their behavior with the recently added `python-check` workflow, providing a more predictable and consistent developer experience across the entire CI suite.

The `coverage.yaml` workflow was also refactored to remove its custom `act` detection logic in favor of the standardized approach.
@github-actions
Copy link
Copy Markdown
Contributor

Review the full CodeQL report for details.

@knoepfel
Copy link
Copy Markdown
Member

Review the full CodeQL report for details.

Is this supposed to point to a scan with the filter:

- is:open branch:main
+ is:open branch:jules-maintenance-trigger-ci-on-bot-commits 

I'm not sure showing the code scans for the main branch is helpful.

@greenc-FNAL
Copy link
Copy Markdown
Contributor Author

Review the full CodeQL report for details.

Is this supposed to point to a scan with the filter:

- is:open branch:main
+ is:open branch:jules-maintenance-trigger-ci-on-bot-commits 

I'm not sure showing the code scans for the main branch is helpful.

To be honest, I don't fully understand the way CodeQL produces alerts at all: I haven't seen an alert generated yet that isn't on the main branch. I'd suggest leaving it as-is for now until we have more data.

@knoepfel
Copy link
Copy Markdown
Member

To be honest, I don't fully understand the way CodeQL produces alerts at all: I haven't seen an alert generated yet that isn't on the main branch. I'd suggest leaving it as-is for now until we have more data.

This suggests that the CodeQL check is currently too opaque to be helpful. We should consider disabling the check until we understand it better—automatically generated comments that seemingly have no relevance to the PR create confusion.

Granted, resolving this issue is not in scope for this PR, and a separate issue should be logged that covers it.

@greenc-FNAL
Copy link
Copy Markdown
Contributor Author

@knoepfel Do you need me to do something specifically here before approval/merge?

@knoepfel
Copy link
Copy Markdown
Member

@knoepfel Do you need me to do something specifically here before approval/merge?

Just a request that you create a bug report that alludes to the CodeQL issue I raised above.

@knoepfel knoepfel merged commit d9dbaa2 into main Nov 20, 2025
5 checks passed
@greenc-FNAL greenc-FNAL deleted the jules-maintenance-trigger-ci-on-bot-commits branch November 25, 2025 17:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants