From 93509eddae633a335ade6baae60230de1cb969c1 Mon Sep 17 00:00:00 2001
From: kcreddy <krish.reddy91@gmail.com>
Date: Thu, 2 Jul 2026 17:51:38 +0530
Subject: [PATCH] ci: disable unowned AI GitHub Actions workflows
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The sweep-* and trigger-* workflows wrap reusable workflows from
elastic/ai-github-actions. These currently have no owner, so disable
them rather than deleting them — deletion would lose the config and
history, and someone may want to adopt and re-enable them later.

Disable via a source-level `if: false` on the `run` job (not the
Actions UI toggle) so that re-enabling requires a reviewed PR and is
visible in git history — a silent flip-back-on isn't possible.

Disabled 16 workflows:
  sweep-dashboard-data-scope, sweep-field-mapping-conflicts,
  sweep-httpjson-pagination, sweep-ingest-pipeline-safety,
  sweep-pipeline-error-handling, trigger-breaking-change-detector,
  trigger-bug-hunter, trigger-docs-patrol,
  trigger-duplicate-issue-detector, trigger-issue-triage,
  trigger-mention-in-issue, trigger-mention-in-pr,
  trigger-newbie-contributor-patrol, trigger-pr-review,
  trigger-text-auditor, trigger-stale-issues

For the 12 single-job workflows, `if: false` plus a comment was added
directly to the `run` job.

For the 4 workflows that already had an `if:` activation condition
(trigger-issue-triage, trigger-mention-in-issue, trigger-mention-in-pr,
trigger-pr-review), YAML permits only one `if:` key per job, so the
original condition was moved into a comment above the job and replaced
with `if: false`. The comment preserves the exact original expression
so it can be restored verbatim on re-enable.

Excluded (intentionally not disabled):
  - trigger-package-tests-security-ml: actively maintained by the
    security-ml team (and uses elastic/ci-gh-actions, not
    elastic/ai-github-actions).
  - trigger-pr-actions-detective: has an extra step-level job
    (actions/github-script) before the reusable-workflow call, so it
    needs separate handling rather than a blanket if: false.

Note: workflows still trigger on their existing events/schedules but
the job is skipped, producing empty "skipped" runs. This is the
accepted trade-off for keeping the disabled state in source.
---
 .github/workflows/sweep-dashboard-data-scope.yml      |  3 +++
 .github/workflows/sweep-field-mapping-conflicts.yml   |  3 +++
 .github/workflows/sweep-httpjson-pagination.yml       |  3 +++
 .github/workflows/sweep-ingest-pipeline-safety.yml    |  3 +++
 .github/workflows/sweep-pipeline-error-handling.yml   |  3 +++
 .../workflows/trigger-breaking-change-detector.yml    |  3 +++
 .github/workflows/trigger-bug-hunter.yml              |  3 +++
 .github/workflows/trigger-docs-patrol.yml             |  3 +++
 .../workflows/trigger-duplicate-issue-detector.yml    |  3 +++
 .github/workflows/trigger-issue-triage.yml            | 10 +++++++---
 .github/workflows/trigger-mention-in-issue.yml        | 10 +++++++---
 .github/workflows/trigger-mention-in-pr.yml           | 10 +++++++---
 .../workflows/trigger-newbie-contributor-patrol.yml   |  3 +++
 .github/workflows/trigger-pr-review.yml               | 11 +++++++----
 .github/workflows/trigger-stale-issues.yml            |  3 +++
 .github/workflows/trigger-text-auditor.yml            |  3 +++
 16 files changed, 64 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/sweep-dashboard-data-scope.yml b/.github/workflows/sweep-dashboard-data-scope.yml
index bf2a3a5239a..0fe35cb5d01 100644
--- a/.github/workflows/sweep-dashboard-data-scope.yml
+++ b/.github/workflows/sweep-dashboard-data-scope.yml
@@ -13,6 +13,9 @@ permissions:
 
 jobs:
   run:
+    # Disabled 2026-07-02 — no current owner. Re-enable by removing this
+    # `if: false` line via a reviewed PR so the change is visible.
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-code-quality-audit.lock.yml@v0
     with:
       title-prefix: "[dashboard-data-scope]"
diff --git a/.github/workflows/sweep-field-mapping-conflicts.yml b/.github/workflows/sweep-field-mapping-conflicts.yml
index d0e8cb6e3bd..8194042422a 100644
--- a/.github/workflows/sweep-field-mapping-conflicts.yml
+++ b/.github/workflows/sweep-field-mapping-conflicts.yml
@@ -13,6 +13,9 @@ permissions:
 
 jobs:
   run:
+    # Disabled 2026-07-02 — no current owner. Re-enable by removing this
+    # `if: false` line via a reviewed PR so the change is visible.
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-code-quality-audit.lock.yml@v0
     with:
       title-prefix: "[field-mapping-conflicts]"
diff --git a/.github/workflows/sweep-httpjson-pagination.yml b/.github/workflows/sweep-httpjson-pagination.yml
index d440b303c03..28582cf806b 100644
--- a/.github/workflows/sweep-httpjson-pagination.yml
+++ b/.github/workflows/sweep-httpjson-pagination.yml
@@ -13,6 +13,9 @@ permissions:
 
 jobs:
   run:
+    # Disabled 2026-07-02 — no current owner. Re-enable by removing this
+    # `if: false` line via a reviewed PR so the change is visible.
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-code-quality-audit.lock.yml@v0
     with:
       title-prefix: "[httpjson-pagination]"
diff --git a/.github/workflows/sweep-ingest-pipeline-safety.yml b/.github/workflows/sweep-ingest-pipeline-safety.yml
index f068d4b9585..b35427fb90a 100644
--- a/.github/workflows/sweep-ingest-pipeline-safety.yml
+++ b/.github/workflows/sweep-ingest-pipeline-safety.yml
@@ -13,6 +13,9 @@ permissions:
 
 jobs:
   run:
+    # Disabled 2026-07-02 — no current owner. Re-enable by removing this
+    # `if: false` line via a reviewed PR so the change is visible.
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-code-quality-audit.lock.yml@v0
     with:
       title-prefix: "[ingest-pipeline-safety]"
diff --git a/.github/workflows/sweep-pipeline-error-handling.yml b/.github/workflows/sweep-pipeline-error-handling.yml
index 55f97be70fd..874826db4d4 100644
--- a/.github/workflows/sweep-pipeline-error-handling.yml
+++ b/.github/workflows/sweep-pipeline-error-handling.yml
@@ -13,6 +13,9 @@ permissions:
 
 jobs:
   run:
+    # Disabled 2026-07-02 — no current owner. Re-enable by removing this
+    # `if: false` line via a reviewed PR so the change is visible.
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-code-quality-audit.lock.yml@v0
     with:
       title-prefix: "[pipeline-error-handling]"
diff --git a/.github/workflows/trigger-breaking-change-detector.yml b/.github/workflows/trigger-breaking-change-detector.yml
index bebc0b78856..9676c2eb807 100644
--- a/.github/workflows/trigger-breaking-change-detector.yml
+++ b/.github/workflows/trigger-breaking-change-detector.yml
@@ -12,6 +12,9 @@ permissions:
 
 jobs:
   run:
+    # Disabled 2026-07-02 — no current owner. Re-enable by removing this
+    # `if: false` line via a reviewed PR so the change is visible.
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-breaking-change-detector.lock.yml@v0
     with:
       additional-instructions: |
diff --git a/.github/workflows/trigger-bug-hunter.yml b/.github/workflows/trigger-bug-hunter.yml
index 9c7bacc1f92..724316dac98 100644
--- a/.github/workflows/trigger-bug-hunter.yml
+++ b/.github/workflows/trigger-bug-hunter.yml
@@ -13,4 +13,7 @@ permissions:
 
 jobs:
   run:
+    # Disabled 2026-07-02 — this workflow has no current owner. Re-enabling
+    # requires removing this line via a reviewed PR, so the change is visible.
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-bug-hunter.lock.yml@v0
diff --git a/.github/workflows/trigger-docs-patrol.yml b/.github/workflows/trigger-docs-patrol.yml
index 3fd8eadb34e..51253875f24 100644
--- a/.github/workflows/trigger-docs-patrol.yml
+++ b/.github/workflows/trigger-docs-patrol.yml
@@ -12,6 +12,9 @@ permissions:
 
 jobs:
   run:
+    # Disabled 2026-07-02 — no current owner. Re-enable by removing this
+    # `if: false` line via a reviewed PR so the change is visible.
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-docs-patrol.lock.yml@v0
     with:
       title-prefix: "[docs-patrol]"
diff --git a/.github/workflows/trigger-duplicate-issue-detector.yml b/.github/workflows/trigger-duplicate-issue-detector.yml
index dc883c778ce..8337d5b9b45 100644
--- a/.github/workflows/trigger-duplicate-issue-detector.yml
+++ b/.github/workflows/trigger-duplicate-issue-detector.yml
@@ -13,6 +13,9 @@ permissions:
 
 jobs:
   run:
+    # Disabled 2026-07-02 — no current owner. Re-enable by removing this
+    # `if: false` line via a reviewed PR so the change is visible.
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-duplicate-issue-detector.lock.yml@v0
     with:
       detect-related-issues: false
diff --git a/.github/workflows/trigger-issue-triage.yml b/.github/workflows/trigger-issue-triage.yml
index 4208fd0dc6e..f0c65783edc 100644
--- a/.github/workflows/trigger-issue-triage.yml
+++ b/.github/workflows/trigger-issue-triage.yml
@@ -15,9 +15,13 @@ jobs:
   run:
     # Access control is enforced by the upstream reusable workflow pre_activation
     # check (required roles: admin, maintainer, write).
-    if: >-
-      github.event.action == 'opened' ||
-      (github.event.action == 'labeled' && github.event.label.name == 'claude-plz-triage')
+    #
+    # Disabled 2026-07-02 — no current owner. To re-enable, remove `if: false`
+    # and restore the original activation condition below via a reviewed PR:
+    #   if: >-
+    #     github.event.action == 'opened' ||
+    #     (github.event.action == 'labeled' && github.event.label.name == 'claude-plz-triage')
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-issue-triage.lock.yml@v0
     with:
       setup-commands: |
diff --git a/.github/workflows/trigger-mention-in-issue.yml b/.github/workflows/trigger-mention-in-issue.yml
index ccc43e59abf..d2133356bdc 100644
--- a/.github/workflows/trigger-mention-in-issue.yml
+++ b/.github/workflows/trigger-mention-in-issue.yml
@@ -15,9 +15,13 @@ jobs:
   run:
     # Access control is enforced by the upstream reusable workflow pre_activation
     # check (required roles: admin, maintainer, write).
-    if: >-
-      github.event.issue.pull_request == null &&
-      (startsWith(github.event.comment.body, '/ai') || contains(github.event.comment.body, '@claude'))
+    #
+    # Disabled 2026-07-02 — no current owner. To re-enable, remove `if: false`
+    # and restore the original activation condition below via a reviewed PR:
+    #   if: >-
+    #     github.event.issue.pull_request == null &&
+    #     (startsWith(github.event.comment.body, '/ai') || contains(github.event.comment.body, '@claude'))
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-mention-in-issue.lock.yml@v0
     with:
       setup-commands: |
diff --git a/.github/workflows/trigger-mention-in-pr.yml b/.github/workflows/trigger-mention-in-pr.yml
index 2b912c6763e..048140d1fcf 100644
--- a/.github/workflows/trigger-mention-in-pr.yml
+++ b/.github/workflows/trigger-mention-in-pr.yml
@@ -17,9 +17,13 @@ jobs:
   run:
     # Access control is enforced by the upstream reusable workflow pre_activation
     # check (required roles: admin, maintainer, write).
-    if: >-
-      (startsWith(github.event.comment.body, '/ai') || contains(github.event.comment.body, '@claude')) &&
-      (github.event.issue.pull_request != null || github.event_name == 'pull_request_review_comment')
+    #
+    # Disabled 2026-07-02 — no current owner. To re-enable, remove `if: false`
+    # and restore the original activation condition below via a reviewed PR:
+    #   if: >-
+    #     (startsWith(github.event.comment.body, '/ai') || contains(github.event.comment.body, '@claude')) &&
+    #     (github.event.issue.pull_request != null || github.event_name == 'pull_request_review_comment')
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-mention-in-pr.lock.yml@v0
     with:
       setup-commands: |
diff --git a/.github/workflows/trigger-newbie-contributor-patrol.yml b/.github/workflows/trigger-newbie-contributor-patrol.yml
index e5929e18c5c..5c3bccc1cb9 100644
--- a/.github/workflows/trigger-newbie-contributor-patrol.yml
+++ b/.github/workflows/trigger-newbie-contributor-patrol.yml
@@ -12,4 +12,7 @@ permissions:
 
 jobs:
   run:
+    # Disabled 2026-07-02 — no current owner. Re-enable by removing this
+    # `if: false` line via a reviewed PR so the change is visible.
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-newbie-contributor-patrol.lock.yml@v0
diff --git a/.github/workflows/trigger-pr-review.yml b/.github/workflows/trigger-pr-review.yml
index a64c54647d5..e0682c34fc9 100644
--- a/.github/workflows/trigger-pr-review.yml
+++ b/.github/workflows/trigger-pr-review.yml
@@ -12,10 +12,13 @@ permissions:
 
 jobs:
   run:
-    if: >-
-      (contains(fromJSON('["Copilot","dependabot[bot]","github-actions[bot]"]'), github.event.pull_request.user.login)) &&
-      github.event.pull_request.draft == false &&
-      !contains(github.event.pull_request.labels.*.name, 'no-pr-review')
+    # Disabled 2026-07-02 — no current owner. To re-enable, remove `if: false`
+    # and restore the original activation condition below via a reviewed PR:
+    #   if: >-
+    #     (contains(fromJSON('["Copilot","dependabot[bot]","github-actions[bot]"]'), github.event.pull_request.user.login)) &&
+    #     github.event.pull_request.draft == false &&
+    #     !contains(github.event.pull_request.labels.*.name, 'no-pr-review')
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-pr-review.lock.yml@v0
     with:
       intensity: aggressive
diff --git a/.github/workflows/trigger-stale-issues.yml b/.github/workflows/trigger-stale-issues.yml
index f1f28a135be..82ae1e3f1f8 100644
--- a/.github/workflows/trigger-stale-issues.yml
+++ b/.github/workflows/trigger-stale-issues.yml
@@ -12,4 +12,7 @@ permissions:
 
 jobs:
   run:
+    # Disabled 2026-07-02 — no current owner. Re-enable by removing this
+    # `if: false` line via a reviewed PR so the change is visible.
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-stale-issues.lock.yml@v0
diff --git a/.github/workflows/trigger-text-auditor.yml b/.github/workflows/trigger-text-auditor.yml
index fa23713c7aa..7fe9a418b0f 100644
--- a/.github/workflows/trigger-text-auditor.yml
+++ b/.github/workflows/trigger-text-auditor.yml
@@ -12,6 +12,9 @@ permissions:
 
 jobs:
   run:
+    # Disabled 2026-07-02 — no current owner. Re-enable by removing this
+    # `if: false` line via a reviewed PR so the change is visible.
+    if: false
     uses: elastic/ai-github-actions/.github/workflows/gh-aw-text-auditor.lock.yml@v0
     with:
       title-prefix: "[text-auditor]"