Files
awesome-opencode/test/fixtures/opencode-run.jsonl
T
e16f6b8419 feat: advisory AI review of needs-human and scout PRs with OpenCode V2 (#560)
* feat: advisory AI review of needs-human and scout PRs with OpenCode V2

A scheduled workflow runs `opencode run` (V2, pinned and checksummed)
with a read-only catalog-reviewer agent over evidence bundles for open
PRs labeled needs-human or scout and for unreviewed scout candidates.
PRs get one verdict comment and an ai-* label; confident scout accepts
get a bot PR. It never merges or closes.

The model runs in a job with no GitHub token; the agent may only read,
glob and grep inside the repository (a self-test proves it before each
run); verdicts are schema-validated and rendered by our own code.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* fix(ai-review): address CodeQL and SonarCloud security findings

Enforce HTTPS on the OpenCode download, run opencode by absolute path,
escape summary cells with escapeCell, rely on HTML escaping instead of
comment-stripping regexes, validate item IDs before routing API calls,
and bound verdict parsing on runaway output.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

---------

Co-authored-by: John Smith <[email protected]>
Co-authored-by: Claude Opus 5.5 <[email protected]>
2026-10-18 00:02:12 -04:00

3 lines
856 B
JSON

{"type":"step_start","timestamp":1792295022371,"sessionID":"ses_eb2e465fcffeI2GapfeguAHMMk","part":{"id":"prt_14d1baf23001gFRRA5s66551xU","sessionID":"ses_eb2e465fcffeI2GapfeguAHMMk","messageID":"msg_14d1ba9f4001r7kVEIfHkEUtBk","type":"step-start","snapshot":"f2b63f84f180ecbc6769e857e6ce7665f2e76dd7"}}
{"type":"text","timestamp":1792295035467,"sessionID":"ses_eb2e465fcffeI2GapfeguAHMMk","part":{"id":"prt_14d1be1d4001vDoSpP6gLVhaeN","sessionID":"ses_eb2e465fcffeI2GapfeguAHMMk","messageID":"msg_14d1ba9f4001r7kVEIfHkEUtBk","type":"text","text":"{\"type\":\"scout\",\"id\":\"c0\",\"package\":\"fixture\",\"verdict\":\"unsure\",\"kind\":null,\"topics\":[],\"tagline\":null,\"reasons\":[\"format test\"],\"policy\":{\"opencode_relevant\":false,\"crypto\":false,\"duplicate_of\":null},\"confidence\":0}","time":{"start":1792295035348,"end":1792295035467}}}