Skip to content

Keep unchanged PRs out of the tooling safety agent - #20495

Open
T-Gro wants to merge 3 commits into
dotnet:mainfrom
T-Gro:t-gro-safety-scanner-revisits
Open

Keep unchanged PRs out of the tooling safety agent#20495
T-Gro wants to merge 3 commits into
dotnet:mainfrom
T-Gro:t-gro-safety-scanner-revisits

Conversation

@T-Gro

@T-Gro T-Gro commented Sep 9, 2026

Copy link
Copy Markdown
Member

Select changed PRs through the GitHub API before starting the agent, and pass it only that work list. Keep the existing scan history instead of pruning it from a partial PR list.

Move selection, scan history, and publication into deterministic jobs. Give the classifier only changed PR snapshots and retain completed results across publication retries.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@github-actions

github-actions Bot commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

✅ No release notes required

Reuse the existing memory and safe-output handling. Remove the custom state machine, publisher, documentation, and test workflow.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@github-actions github-actions Bot added ⚠️ Affects-Agent-Config Tooling check: PR modifies AI agent instructions or workflows ⚠️ Affects-Build-Infra Tooling check: PR touches build infrastructure labels Sep 9, 2026
@github-actions

This comment has been minimized.

Remove content fingerprints, schema checks, and the redundant empty-output condition. Shorten the prompt changes and retain compatibility with existing abbreviated SHAs.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@github-actions github-actions Bot added the ⚠️ Suspicious-Prompting Tooling check: prompt injection patterns found in title/body/diff/commits label Sep 9, 2026
@github-actions

github-actions Bot commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

🔍 Tooling Safety Check — Affects-Agent-Config, Affects-Build-Infra, Suspicious-Prompting
Affects-Agent-Config: Modifies the agent tooling workflow.
Affects-Build-Infra: Changes a workflow that executes repository automation.
Suspicious-Prompting: PR text includes directives aimed at controlling the scanner.

Generated by PR Tooling Safety Check · gpt56 963.8K ·

@T-Gro T-Gro added the AI-reviewed PR reviewed by AI review council label Sep 9, 2026
@T-Gro
T-Gro requested a review from abonie September 9, 2026 10:39
@T-Gro
T-Gro enabled auto-merge (squash) September 9, 2026 12:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

⚠️ Affects-Agent-Config Tooling check: PR modifies AI agent instructions or workflows ⚠️ Affects-Build-Infra Tooling check: PR touches build infrastructure AI-reviewed PR reviewed by AI review council ⚠️ Suspicious-Prompting Tooling check: prompt injection patterns found in title/body/diff/commits

Projects

Status: New

Development

Successfully merging this pull request may close these issues.

1 participant