From 07688de15d3bf85a6d4a916e8c840127f07d49db Mon Sep 17 00:00:00 2001 From: rohan-tessl Date: Wed, 29 Apr 2026 12:37:01 +0530 Subject: [PATCH 1/2] ci: add Tessl skill review workflow (SHA-pinned) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Add .github/workflows/skill-review.yml that runs `tessl skill review` on PRs touching SKILL.md files and posts scores as a PR comment. Action is pinned to SHA 22e928dd837202b2b1d1397e0114c92e0fae5ead (not @main) for supply-chain safety. - No Tessl login or API token needed — only GITHUB_TOKEN - Non-blocking by default (feedback-only, no red CI) - One updated PR comment per run --- .github/workflows/skill-review.yml | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 .github/workflows/skill-review.yml diff --git a/.github/workflows/skill-review.yml b/.github/workflows/skill-review.yml new file mode 100644 index 00000000..3424d323 --- /dev/null +++ b/.github/workflows/skill-review.yml @@ -0,0 +1,22 @@ +# Tessl Skill Review — runs on PRs that change any SKILL.md; posts scores as one PR comment. +# Docs: https://github.com/tesslio/skill-review +name: Tessl Skill Review + +on: + pull_request: + branches: [main] + paths: + - "**/SKILL.md" + +jobs: + review: + runs-on: ubuntu-latest + permissions: + pull-requests: write + contents: read + steps: + - uses: actions/checkout@v4 + - uses: tesslio/skill-review@22e928dd837202b2b1d1397e0114c92e0fae5ead # pin to SHA for supply-chain safety + # Optional quality gate (off by default — do not enable unless user asked): + # with: + # fail-threshold: 70 From 5552ad387b2cb206e68a470ce980c952f2f868b5 Mon Sep 17 00:00:00 2001 From: rohan-tessl Date: Wed, 29 Apr 2026 12:40:19 +0530 Subject: [PATCH 2/2] fix: format skill-review.yml to pass oxfmt lint --- .github/workflows/skill-review.yml | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/.github/workflows/skill-review.yml b/.github/workflows/skill-review.yml index 3424d323..b0388e19 100644 --- a/.github/workflows/skill-review.yml +++ b/.github/workflows/skill-review.yml @@ -1,4 +1,4 @@ -# Tessl Skill Review — runs on PRs that change any SKILL.md; posts scores as one PR comment. +# Tessl Skill Review — runs on PRs that change any SKILL.md # Docs: https://github.com/tesslio/skill-review name: Tessl Skill Review @@ -16,7 +16,4 @@ jobs: contents: read steps: - uses: actions/checkout@v4 - - uses: tesslio/skill-review@22e928dd837202b2b1d1397e0114c92e0fae5ead # pin to SHA for supply-chain safety - # Optional quality gate (off by default — do not enable unless user asked): - # with: - # fail-threshold: 70 + - uses: tesslio/skill-review@22e928dd837202b2b1d1397e0114c92e0fae5ead