diff --git a/.gitea/workflows/review-refire-comments.yml b/.gitea/workflows/review-refire-comments.yml index 1fa226d0..f5e8d6d8 100644 --- a/.gitea/workflows/review-refire-comments.yml +++ b/.gitea/workflows/review-refire-comments.yml @@ -37,90 +37,3 @@ jobs: run: | echo "::warning::review-refire-comments.yml is deprecated. Refire logic is now in sop-checklist.yml review-refire job. This workflow is a no-op stub pending deletion (issue #1280)." exit 0 - runs-on: ubuntu-latest - steps: - - name: Classify comment - id: classify - env: - COMMENT_BODY: ${{ github.event.comment.body }} - IS_PR: ${{ github.event.issue.pull_request != null }} - run: | - set -euo pipefail - { - echo "run_qa=false" - echo "run_security=false" - echo "run_tier=false" - } >> "$GITHUB_OUTPUT" - if [ "$IS_PR" != "true" ]; then - echo "::notice::not a PR comment; no-op" - exit 0 - fi - first_line=$(printf '%s\n' "$COMMENT_BODY" | sed -n '1p') - case "$first_line" in - /qa-recheck*) - echo "run_qa=true" >> "$GITHUB_OUTPUT" - ;; - /security-recheck*) - echo "run_security=true" >> "$GITHUB_OUTPUT" - ;; - /refire-tier-check*) - echo "run_tier=true" >> "$GITHUB_OUTPUT" - ;; - *) - echo "::notice::no supported review refire slash command; no-op" - ;; - esac - - - name: Check out BASE ref for trusted scripts - if: | - steps.classify.outputs.run_qa == 'true' || - steps.classify.outputs.run_security == 'true' || - steps.classify.outputs.run_tier == 'true' - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - with: - ref: ${{ github.event.repository.default_branch }} - - - name: Refire qa-review status - if: steps.classify.outputs.run_qa == 'true' - env: - GITEA_TOKEN: ${{ secrets.RFC_324_TEAM_READ_TOKEN || secrets.GITHUB_TOKEN }} - GITEA_HOST: git.moleculesai.app - REPO: ${{ github.repository }} - PR_NUMBER: ${{ github.event.issue.number }} - DEFAULT_BRANCH: ${{ github.event.repository.default_branch }} - TEAM: qa - TEAM_ID: '20' - REVIEW_CHECK_DEBUG: '0' - REVIEW_CHECK_STRICT: '0' - COMMENT_AUTHOR: ${{ github.event.comment.user.login }} - run: | - set -euo pipefail - .gitea/scripts/review-refire-status.sh - - - name: Refire security-review status - if: steps.classify.outputs.run_security == 'true' - env: - GITEA_TOKEN: ${{ secrets.RFC_324_TEAM_READ_TOKEN || secrets.GITHUB_TOKEN }} - GITEA_HOST: git.moleculesai.app - REPO: ${{ github.repository }} - PR_NUMBER: ${{ github.event.issue.number }} - DEFAULT_BRANCH: ${{ github.event.repository.default_branch }} - TEAM: security - TEAM_ID: '21' - REVIEW_CHECK_DEBUG: '0' - REVIEW_CHECK_STRICT: '0' - COMMENT_AUTHOR: ${{ github.event.comment.user.login }} - run: | - set -euo pipefail - .gitea/scripts/review-refire-status.sh - - - name: Refire sop-tier-check status - if: steps.classify.outputs.run_tier == 'true' - env: - GITEA_TOKEN: ${{ secrets.SOP_TIER_CHECK_TOKEN || secrets.GITHUB_TOKEN }} - GITEA_HOST: git.moleculesai.app - REPO: ${{ github.repository }} - PR_NUMBER: ${{ github.event.issue.number }} - COMMENT_AUTHOR: ${{ github.event.comment.user.login }} - SOP_DEBUG: '0' - run: bash .gitea/scripts/sop-tier-refire.sh