ci: fix pull_request_target add schedule dependabotbot PR#2688
Merged
Conversation
Contributor
Control PanelHi, I'm an AI-powered Review Bot that helps you with summarizing and reviewing pull requests.
|
There was a problem hiding this comment.
Pull request overview
This PR removes pull_request_target-based automation for bot PR project triage and replaces it with a scheduled workflow that periodically discovers open bot PRs (Dependabot + kyma-goat-bot) and adds them to a GitHub Project with predefined field values.
Changes:
- Add a scheduled/manual workflow that queries open bot PRs and adds them to the org Project (including setting
Status=ReviewandReady=Sprint). - Remove the previous
pull_request_targetworkflow that added bot PRs to the Project on PR events. - Remove the
pull_request_targettrigger from the external image sync workflow (now runs only on push tomain).
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 6 comments.
| File | Description |
|---|---|
.github/workflows/schedule-add-bot-prs-to-project.yaml |
New scheduled workflow to find bot PRs, avoid pull_request_target, and add/update GitHub Project items. |
.github/workflows/pull-add-bot-prs-to-project.yaml |
Deletes the pull_request_target workflow that previously added bot PRs on PR events. |
.github/workflows/post-sync-external-images.yaml |
Removes pull_request_target trigger, leaving only a push-to-main trigger for syncing external images. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
mluk-sap
approved these changes
Jun 2, 2026
kubicar
enabled auto-merge (squash)
June 3, 2026 06:43
kubicar
added a commit
that referenced
this pull request
Jun 10, 2026
* ci: change pull_request_target to pull_request, don't sync images from fork * ci: move adding PRs from dependabot to scheduled job * fix: cr apply suggested changes (cherry picked from commit 1a4b7e3)
kubicar
added a commit
that referenced
this pull request
Jun 10, 2026
* ci: fix pull_request_target, add schedule dependabotbot PR (#2688) * ci: change pull_request_target to pull_request, don't sync images from fork * ci: move adding PRs from dependabot to scheduled job * fix: cr apply suggested changes (cherry picked from commit 1a4b7e3) * ci: hardening pipelines (#2697) * ci: add environments to scope secrets and variables (cherry picked from commit 41945ae) * ci: move not secret information to vars from secrets (#2698) * ci: add environments to scope secrets and variables * ci: add environments to scope secrets and variables * ci: move not secret information to vars from secrets (not needed rotation) (cherry picked from commit 1843359)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Changes proposed in this pull request:
Pre-Merge Checklist
Consider all the following items. If your contribution violates any of them, or you are not sure about it, add a comment to the PR.
make manifestsand committed the changes before the merge.Related issues