Skip to content

feat: enable OpenTelemetry in all GitHub agentic workflows #491

feat: enable OpenTelemetry in all GitHub agentic workflows

feat: enable OpenTelemetry in all GitHub agentic workflows #491

# This file is auto-generated by scripts/dogfood.sh. Do not edit directly.
# Edit gh-agent-workflows/dependency-review/example.yml and run 'make compile' to regenerate.
name: Trigger Dependency Review
on:
pull_request:
types: [opened, synchronize, reopened]
permissions:
actions: read
contents: read
copilot-requests: write
issues: write
pull-requests: write
jobs:
run:
if: >-
github.event.pull_request.user.login == 'dependabot[bot]' ||
github.event.pull_request.user.login == 'renovate[bot]' ||
startsWith(github.head_ref, 'updatecli')
uses: ./.github/workflows/gh-aw-dependency-review.lock.yml
# with:
# Configure which labels the agent may apply and define their semantics in additional-instructions.
# classification-labels: "needs-human-review,higher-risk,merge-ready"
# additional-instructions: |
# - `needs-human-review`: Apply when breaking changes are found, a major version bump, unverified SHA, or mutable tag move.
# - `higher-risk`: Apply when the dependency is only used in push/release/schedule/dispatch workflows.
# - `merge-ready`: Apply when all dependency updates are safe to merge without human review.
# For updatecli: uncomment and set your repo's updatecli bot actor (it varies per repo).
# allowed-bot-users: "github-actions[bot]"
#secrets:
# Optional: pass an ephemeral token (e.g. a GitHub App token) via GH_AW_GITHUB_TOKEN
# so that PR labels applied by this workflow can trigger downstream label-based workflows.
# When omitted, the built-in GITHUB_TOKEN is used for labeling, which does
# not re-trigger other workflows.
# GH_AW_GITHUB_TOKEN: ${{ secrets.GH_AW_GITHUB_TOKEN }}