Skip to content
Closed
Changes from all commits
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
5c0454a
fix: pin feature-ideation.yml reusable workflow to SHA (closes #88)
github-actions[bot] Apr 14, 2026
2573671
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] Apr 21, 2026
f4af98f
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] Apr 25, 2026
62a2183
retrigger: bump workflows to run checks
claude Apr 28, 2026
8a05743
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 3, 2026
1c98cc8
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 4, 2026
0a6ed97
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 4, 2026
d491e29
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 4, 2026
d55e90f
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 4, 2026
13ff2a2
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 4, 2026
247dae8
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 5, 2026
c0e58bf
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 10, 2026
1747b79
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 11, 2026
838f588
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 11, 2026
6b15992
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 11, 2026
c5d3c3e
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 12, 2026
5993306
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 13, 2026
0b0150c
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 15, 2026
91baf3d
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 16, 2026
333929a
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 18, 2026
3415cde
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 18, 2026
fd86b79
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 19, 2026
a01ea6c
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 19, 2026
eb6c8d9
Merge branch 'main' into claude/issue-88-20260414-1246
github-actions[bot] May 19, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 8 additions & 2 deletions .github/workflows/feature-ideation.yml
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@ name: Feature Research & Ideation (BMAD Analyst)

on:
schedule:
- cron: '0 7 * * 5' # Friday 07:00 UTC (3 AM EDT / 2 AM EST)
- cron: '0 7 * * 5' # Friday 07:00 UTC (3 AM EDT / 2 AM EST)
workflow_dispatch:
inputs:
focus_area:
Expand All @@ -53,6 +53,11 @@ on:
- quick
- standard
- deep
dry_run:
description: 'Skip Discussion mutations and log them to a JSONL artifact instead. Use this on a fork to smoke-test before going live.'
required: false
default: false
type: boolean

permissions: {}

Expand All @@ -75,7 +80,7 @@ jobs:
pull-requests: read
discussions: write
id-token: write

Copilot AI Apr 14, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The header guidance says you “MUST NOT change … the uses: line”, but this PR legitimately changes it to pin to a SHA for compliance. To avoid future confusion (and reduce the risk of someone reverting the pin), update the guidance to explicitly allow/require SHA pin updates while still forbidding changing the referenced reusable workflow path.

Suggested change
id-token: write
id-token: write
# Keep the reusable workflow path unchanged unless the standard itself moves.
# Update the pinned commit SHA when adopting a newer approved standard version
# or when compliance/security policy requires refreshing the pin.

Copilot uses AI. Check for mistakes.
uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@v1
uses: petry-projects/.github/.github/workflows/feature-ideation-reusable.yml@208ec2d69b75227d375edf8745d84fbac05a76b2 # v1
with:
# === CUSTOMISE THIS PER REPO — the only required edit ===
# Replace this paragraph with a 3-5 sentence description of your project,
Expand All @@ -87,5 +92,6 @@ jobs:
include A, B, C. Key emerging trends in this space: X, Y, Z."
focus_area: ${{ inputs.focus_area || '' }}
research_depth: ${{ inputs.research_depth || 'standard' }}
dry_run: ${{ inputs.dry_run || false }}

Copilot AI Apr 14, 2026

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

workflow_dispatch inputs are often surfaced as strings (e.g., 'true'/'false'). Using inputs.dry_run || false can therefore produce the string 'false' on a manual dispatch, which is truthy in GitHub expressions and can cause the reusable workflow to treat dry_run as enabled. Consider coercing to a real boolean (e.g., compare to 'true' or use fromJSON(inputs.dry_run)) before passing it to the reusable workflow.

Suggested change
dry_run: ${{ inputs.dry_run || false }}
dry_run: ${{ inputs.dry_run == true || inputs.dry_run == 'true' }}

Copilot uses AI. Check for mistakes.
secrets:
CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}