Skip to content

ci: remove code-butler workflow - #16

Open
Ayushmore1214 wants to merge 5 commits into
masterfrom
fix/remove-code-butler
Open

ci: remove code-butler workflow#16
Ayushmore1214 wants to merge 5 commits into
masterfrom
fix/remove-code-butler

Conversation

@Ayushmore1214

Copy link
Copy Markdown
Owner

ca-dp/code-butler@v1 is an unpinned third-party action that receives OPENAI_API_KEY. The v1 mutable tag means any push to that repo executes arbitrary code in our CI with access to that secret. The action also uses gpt-4-1106-preview, which OpenAI deprecated in early 2024, making it likely already broken.

If AI-assisted review is needed in future, implement it with an in-repo actions/github-script step that calls the API directly.

What this PR does:

Why we need it:

Which issue(s) this PR fixes:

Fixes #

Does this PR introduce a user-facing change?:

  • How are users affected by this change:
  • Is this breaking change:
  • How to migrate (if breaking change):

Ayushmore1214 and others added 5 commits June 5, 2026 22:30
Updated the condition for the thank-you job to check for true explicitly and added a reference to the base SHA when checking out the repository.

Signed-off-by: Ayush More <ayushmore42595@gmail.com>
Signed-off-by: Ayush More <ayushmore42595@gmail.com>
Update README to reflect documentation change
Signed-off-by: Ayush More <ayushmore42595@gmail.com>
ca-dp/code-butler@v1 is an unpinned third-party action that receives
OPENAI_API_KEY. The v1 mutable tag means any push to that repo executes
arbitrary code in our CI with access to that secret. The action also
uses gpt-4-1106-preview, which OpenAI deprecated in early 2024, making
it likely already broken.

If AI-assisted review is needed in future, implement it with an
in-repo actions/github-script step that calls the API directly.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant