feat: enable OpenTelemetry in all GitHub agentic workflows #491
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This file is auto-generated by scripts/dogfood.sh. Do not edit directly. | |
| # Edit gh-agent-workflows/dependency-review/example.yml and run 'make compile' to regenerate. | |
| name: Trigger Dependency Review | |
| on: | |
| pull_request: | |
| types: [opened, synchronize, reopened] | |
| permissions: | |
| actions: read | |
| contents: read | |
| copilot-requests: write | |
| issues: write | |
| pull-requests: write | |
| jobs: | |
| run: | |
| if: >- | |
| github.event.pull_request.user.login == 'dependabot[bot]' || | |
| github.event.pull_request.user.login == 'renovate[bot]' || | |
| startsWith(github.head_ref, 'updatecli') | |
| uses: ./.github/workflows/gh-aw-dependency-review.lock.yml | |
| # with: | |
| # Configure which labels the agent may apply and define their semantics in additional-instructions. | |
| # classification-labels: "needs-human-review,higher-risk,merge-ready" | |
| # additional-instructions: | | |
| # - `needs-human-review`: Apply when breaking changes are found, a major version bump, unverified SHA, or mutable tag move. | |
| # - `higher-risk`: Apply when the dependency is only used in push/release/schedule/dispatch workflows. | |
| # - `merge-ready`: Apply when all dependency updates are safe to merge without human review. | |
| # For updatecli: uncomment and set your repo's updatecli bot actor (it varies per repo). | |
| # allowed-bot-users: "github-actions[bot]" | |
| #secrets: | |
| # Optional: pass an ephemeral token (e.g. a GitHub App token) via GH_AW_GITHUB_TOKEN | |
| # so that PR labels applied by this workflow can trigger downstream label-based workflows. | |
| # When omitted, the built-in GITHUB_TOKEN is used for labeling, which does | |
| # not re-trigger other workflows. | |
| # GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }} |