-
Notifications
You must be signed in to change notification settings - Fork 0
Feature: Autonomous Repository Automation & Intelligence #88
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1 @@ | ||
| * @NITISH-R-G |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,24 @@ | ||
| name: Bug Report | ||
| description: File a bug report | ||
| title: "[Bug]: " | ||
| labels: ["bug"] | ||
| body: | ||
| - type: markdown | ||
| attributes: | ||
| value: | | ||
| Thanks for taking the time to fill out this bug report! | ||
| - type: textarea | ||
| id: what-happened | ||
| attributes: | ||
| label: What happened? | ||
| description: Also tell us, what did you expect to happen? | ||
| placeholder: Tell us what you see! | ||
| value: "A bug happened!" | ||
| validations: | ||
| required: true | ||
| - type: textarea | ||
| id: logs | ||
| attributes: | ||
| label: Relevant log output | ||
| description: Please copy and paste any relevant log output. This will be automatically formatted into code, so no need for backticks. | ||
| render: shell | ||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,21 @@ | ||
| name: Feature Request | ||
| description: Suggest an idea for this project | ||
| title: "[Feature]: " | ||
| labels: ["enhancement"] | ||
| body: | ||
| - type: markdown | ||
| attributes: | ||
| value: | | ||
| Thanks for taking the time to fill out this feature request! | ||
| - type: textarea | ||
| id: feature-description | ||
| attributes: | ||
| label: Description | ||
| description: A clear and concise description of what you want. | ||
| validations: | ||
| required: true | ||
| - type: textarea | ||
| id: use-cases | ||
| attributes: | ||
| label: Use Cases | ||
| description: What are the use cases for this feature? |
| Original file line number | Diff line number | Diff line change | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,22 @@ | ||||||||||
| ## Description | ||||||||||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win Use a top-level heading at the start of the template. Line 1 begins with Suggested fix-## Description
+# Pull Request
+
+## Description📝 Committable suggestion
Suggested change
🧰 Tools🪛 markdownlint-cli2 (0.22.1)[warning] 1-1: First line in a file should be a top-level heading (MD041, first-line-heading, first-line-h1) 🤖 Prompt for AI AgentsSource: Linters/SAST tools |
||||||||||
|
|
||||||||||
| Please include a summary of the change and which issue is fixed. | ||||||||||
|
|
||||||||||
| Fixes # (issue) | ||||||||||
|
|
||||||||||
| ## Type of change | ||||||||||
|
|
||||||||||
| - [ ] Bug fix (non-breaking change which fixes an issue) | ||||||||||
| - [ ] New feature (non-breaking change which adds functionality) | ||||||||||
| - [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected) | ||||||||||
| - [ ] This change requires a documentation update | ||||||||||
|
|
||||||||||
| ## Checklist: | ||||||||||
|
|
||||||||||
| - [ ] My code follows the style guidelines of this project | ||||||||||
| - [ ] I have performed a self-review of my own code | ||||||||||
| - [ ] I have commented my code, particularly in hard-to-understand areas | ||||||||||
| - [ ] I have made corresponding changes to the documentation | ||||||||||
| - [ ] My changes generate no new warnings | ||||||||||
| - [ ] I have added tests that prove my fix is effective or that my feature works | ||||||||||
| - [ ] New and existing unit tests pass locally with my changes | ||||||||||
| Original file line number | Diff line number | Diff line change | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,34 @@ | ||||||||||||||||||||||||||
| # Add 'python' label to any changes within 'ev_grid_oracle', 'server', 'training', 'tools', 'viz' or 'tests' folders | ||||||||||||||||||||||||||
| python: | ||||||||||||||||||||||||||
| - any: | ||||||||||||||||||||||||||
| - changed-files: | ||||||||||||||||||||||||||
| - any-glob-to-any-file: | ||||||||||||||||||||||||||
| - ev_grid_oracle/**/* | ||||||||||||||||||||||||||
| - server/**/* | ||||||||||||||||||||||||||
| - training/**/* | ||||||||||||||||||||||||||
| - tools/**/* | ||||||||||||||||||||||||||
| - viz/**/* | ||||||||||||||||||||||||||
| - tests/**/* | ||||||||||||||||||||||||||
| - '*.py' | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| # Add 'frontend' label to any changes within 'web' folder | ||||||||||||||||||||||||||
| frontend: | ||||||||||||||||||||||||||
| - any: | ||||||||||||||||||||||||||
| - changed-files: | ||||||||||||||||||||||||||
| - any-glob-to-any-file: | ||||||||||||||||||||||||||
| - web/**/* | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| # Add 'documentation' label to any changes to .md files | ||||||||||||||||||||||||||
| documentation: | ||||||||||||||||||||||||||
| - any: | ||||||||||||||||||||||||||
| - changed-files: | ||||||||||||||||||||||||||
| - any-glob-to-any-file: | ||||||||||||||||||||||||||
| - '**/*.md' | ||||||||||||||||||||||||||
| - docs/**/* | ||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||
| # Add 'github-actions' label to any changes within .github folder | ||||||||||||||||||||||||||
| github-actions: | ||||||||||||||||||||||||||
| - any: | ||||||||||||||||||||||||||
| - changed-files: | ||||||||||||||||||||||||||
| - any-glob-to-any-file: | ||||||||||||||||||||||||||
| - .github/**/* | ||||||||||||||||||||||||||
|
Comment on lines
+29
to
+34
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🎯 Functional Correctness | 🟡 Minor | ⚡ Quick win Narrow the Lines 29-34 currently tag any Suggested fix # Add 'github-actions' label to any changes within .github folder
github-actions:
- any:
- changed-files:
- any-glob-to-any-file:
- - .github/**/*
+ - .github/workflows/**/*📝 Committable suggestion
Suggested change
🤖 Prompt for AI Agents |
||||||||||||||||||||||||||
This file was deleted.
| Original file line number | Diff line number | Diff line change | ||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,24 @@ | ||||||||||||||||||||||
| name: AI PR Reviewer | ||||||||||||||||||||||
|
|
||||||||||||||||||||||
| on: | ||||||||||||||||||||||
| pull_request: | ||||||||||||||||||||||
| types: [opened, synchronize, reopened] | ||||||||||||||||||||||
|
Comment on lines
+3
to
+5
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🚀 Performance & Scalability | 🔵 Trivial | ⚡ Quick win Add a concurrency group to cancel superseded runs. Each ♻️ Proposed addition on:
pull_request:
types: [opened, synchronize, reopened]
+
+concurrency:
+ group: ai-review-${{ github.event.pull_request.number }}
+ cancel-in-progress: true📝 Committable suggestion
Suggested change
🧰 Tools🪛 zizmor (1.26.1)[warning] 3-5: insufficient job-level concurrency limits (concurrency-limits): workflow is missing concurrency setting (concurrency-limits) 🤖 Prompt for AI AgentsSource: Linters/SAST tools |
||||||||||||||||||||||
|
|
||||||||||||||||||||||
| permissions: | ||||||||||||||||||||||
| pull-requests: write | ||||||||||||||||||||||
| contents: read | ||||||||||||||||||||||
|
Comment on lines
+3
to
+9
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🔒 Security & Privacy | 🟠 Major | 🏗️ Heavy lift Fork PRs will fail: For pull requests opened from forks, the
🧰 Tools🪛 zizmor (1.26.1)[error] 8-8: overly broad permissions (excessive-permissions): pull-requests: write is overly broad at the workflow level (excessive-permissions) [warning] 8-8: permissions without explanatory comments (undocumented-permissions): needs an explanatory comment (undocumented-permissions) [warning] 3-5: insufficient job-level concurrency limits (concurrency-limits): workflow is missing concurrency setting (concurrency-limits) 🤖 Prompt for AI Agents
Comment on lines
+7
to
+9
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🔒 Security & Privacy | 🔵 Trivial | 💤 Low value Scope With a single job, granting write at the workflow level is broader than needed. Move the 🧰 Tools🪛 zizmor (1.26.1)[error] 8-8: overly broad permissions (excessive-permissions): pull-requests: write is overly broad at the workflow level (excessive-permissions) [warning] 8-8: permissions without explanatory comments (undocumented-permissions): needs an explanatory comment (undocumented-permissions) 🤖 Prompt for AI AgentsSource: Linters/SAST tools |
||||||||||||||||||||||
|
|
||||||||||||||||||||||
| jobs: | ||||||||||||||||||||||
| review: | ||||||||||||||||||||||
| runs-on: ubuntu-latest | ||||||||||||||||||||||
| if: ${{ github.event.sender.type != 'Bot' }} | ||||||||||||||||||||||
| steps: | ||||||||||||||||||||||
| - name: AI PR Review | ||||||||||||||||||||||
| uses: coderabbitai/openai-pr-reviewer@latest | ||||||||||||||||||||||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🔒 Security & Privacy | 🟡 Minor | ⚡ Quick win 🧩 Analysis chain🌐 Web query:
💡 Result: Yes, the coderabbitai/openai-pr-reviewer GitHub Action (also known as coderabbitai/ai-pr-reviewer) supports the use of a "latest" tag [1][2]. The project documentation explicitly provides examples using Citations:
Pin this action to a commit SHA instead of 🧰 Tools🪛 zizmor (1.26.1)[error] 17-17: unpinned action reference (unpinned-uses): action is not pinned to a hash (required by blanket policy) (unpinned-uses) 🤖 Prompt for AI AgentsSource: Linters/SAST tools |
||||||||||||||||||||||
| env: | ||||||||||||||||||||||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||||||||||||||||||||||
| OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }} | ||||||||||||||||||||||
| with: | ||||||||||||||||||||||
| debug: false | ||||||||||||||||||||||
| review_simple_changes: false | ||||||||||||||||||||||
| review_comment_lgtm: false | ||||||||||||||||||||||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,38 @@ | ||
| name: "CodeQL Advanced" | ||
|
|
||
| on: | ||
| push: | ||
| branches: [ "main" ] | ||
| pull_request: | ||
| branches: [ "main" ] | ||
| schedule: | ||
| - cron: '30 2 * * 0' | ||
|
|
||
| jobs: | ||
| analyze: | ||
| name: Analyze | ||
| runs-on: ubuntu-latest | ||
| permissions: | ||
| security-events: write | ||
| packages: read | ||
| actions: read | ||
| contents: read | ||
|
|
||
| strategy: | ||
| fail-fast: false | ||
| matrix: | ||
| language: [ 'javascript-typescript', 'python' ] | ||
|
|
||
| steps: | ||
| - name: Checkout repository | ||
| uses: actions/checkout@v4 | ||
|
|
||
| - name: Initialize CodeQL | ||
| uses: github/codeql-action/init@v3 | ||
| with: | ||
| languages: ${{ matrix.language }} | ||
|
|
||
| - name: Perform CodeQL Analysis | ||
| uses: github/codeql-action/analyze@v3 | ||
|
Comment on lines
+27
to
+36
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🔒 Security & Privacy | 🟠 Major | ⚡ Quick win 🧩 Analysis chain🏁 Script executed: #!/bin/bash
set -euo pipefail
sed -n '1,220p' .github/workflows/codeql.ymlRepository: NITISH-R-G/ev-grid-oracle Length of output: 928 Pin these action references to immutable commit SHAs. 🧰 Tools🪛 zizmor (1.26.1)[warning] 27-28: credential persistence through GitHub Actions artifacts (artipacked): does not set persist-credentials: false (artipacked) [error] 28-28: unpinned action reference (unpinned-uses): action is not pinned to a hash (required by blanket policy) (unpinned-uses) [error] 31-31: unpinned action reference (unpinned-uses): action is not pinned to a hash (required by blanket policy) (unpinned-uses) [error] 36-36: unpinned action reference (unpinned-uses): action is not pinned to a hash (required by blanket policy) (unpinned-uses) 🤖 Prompt for AI AgentsSource: Linters/SAST tools |
||
| with: | ||
| category: "/language:${{matrix.language}}" | ||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,20 @@ | ||
| name: Greetings | ||
|
|
||
| on: | ||
| pull_request_target: | ||
| types: [opened] | ||
| issues: | ||
| types: [opened] | ||
|
|
||
| jobs: | ||
| greeting: | ||
| runs-on: ubuntu-latest | ||
| permissions: | ||
| issues: write | ||
| pull-requests: write | ||
| steps: | ||
| - uses: actions/first-interaction@v1 | ||
| with: | ||
| repo-token: ${{ secrets.GITHUB_TOKEN }} | ||
| issue-message: 'Welcome to the repository! Thanks for opening your first issue. Our team will look into it shortly.' | ||
| pr-message: 'Welcome to the repository! Thanks for submitting your first pull request. Please make sure you have followed our contributing guidelines and all checks pass.' | ||
|
Comment on lines
+16
to
+20
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🔒 Security & Privacy | 🟠 Major | ⚡ Quick win 🧩 Analysis chain🏁 Script executed: #!/bin/bash
set -euo pipefail
rg -n "actions/first-interaction@" -S .Repository: NITISH-R-G/ev-grid-oracle Length of output: 163 🏁 Script executed: #!/bin/bash
set -euo pipefail
git ls-files .github/workflows/greetings.yml
wc -l .github/workflows/greetings.yml
cat -n .github/workflows/greetings.yml | sed -n '1,120p'Repository: NITISH-R-G/ev-grid-oracle Length of output: 991 Pin 🧰 Tools🪛 zizmor (1.26.1)[error] 16-16: unpinned action reference (unpinned-uses): action is not pinned to a hash (required by blanket policy) (unpinned-uses) 🤖 Prompt for AI AgentsSource: Linters/SAST tools |
||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,16 @@ | ||
| name: "Pull Request Labeler" | ||
| on: | ||
| pull_request_target: | ||
| types: [opened, synchronize, reopened] | ||
|
|
||
| jobs: | ||
| labeler: | ||
| permissions: | ||
| contents: read | ||
| pull-requests: write | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/labeler@v5 | ||
| with: | ||
| repo-token: "${{ secrets.GITHUB_TOKEN }}" | ||
| sync-labels: true | ||
|
Comment on lines
+13
to
+16
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🔒 Security & Privacy | 🟠 Major | ⚡ Quick win 🧩 Analysis chain🏁 Script executed: #!/bin/bash
set -euo pipefail
printf '\n== search for other workflow action pinning patterns ==\n'
rg -n 'uses: .*`@v`[0-9]+' .github/workflows || true
printf '\n== search for pinned SHAs in workflows ==\n'
rg -n 'uses: .*@[0-9a-f]{40}' .github/workflows || trueRepository: NITISH-R-G/ev-grid-oracle Length of output: 1949 🏁 Script executed: #!/bin/bash
set -euo pipefail
cat -n .github/workflows/labeler.ymlRepository: NITISH-R-G/ev-grid-oracle Length of output: 614 Pin Suggested fix- - uses: actions/labeler@v5
+ - uses: actions/labeler@<full-length-commit-sha>🧰 Tools🪛 zizmor (1.26.1)[error] 13-13: unpinned action reference (unpinned-uses): action is not pinned to a hash (required by blanket policy) (unpinned-uses) 🤖 Prompt for AI AgentsSource: Linters/SAST tools |
||
| Original file line number | Diff line number | Diff line change | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| @@ -0,0 +1,65 @@ | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| name: Repository Maintenance Automation | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| on: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| push: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| branches: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - main | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| pull_request: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| branches: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - main | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| schedule: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - cron: '0 2 * * *' # Run daily at 2 AM | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| permissions: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| contents: write | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| pull-requests: write | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Comment on lines
+13
to
+15
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🔒 Security & Privacy | 🔵 Trivial | ⚡ Quick win Scope write permissions to the job that needs them.
🛠️ Proposed fix-permissions:
- contents: write
- pull-requests: write
+permissions:
+ contents: read
jobs:
maintenance:
runs-on: ubuntu-latest
+ permissions:
+ contents: write # auto-commit generated artifacts back to the branch
+ pull-requests: write # update PR with maintenance changes
if: github.repository == github.event.pull_request.head.repo.full_name || github.event_name != 'pull_request'📝 Committable suggestion
Suggested change
🧰 Tools🪛 zizmor (1.26.1)[error] 14-14: overly broad permissions (excessive-permissions): contents: write is overly broad at the workflow level (excessive-permissions) [error] 15-15: overly broad permissions (excessive-permissions): pull-requests: write is overly broad at the workflow level (excessive-permissions) [warning] 14-14: permissions without explanatory comments (undocumented-permissions): needs an explanatory comment (undocumented-permissions) 🤖 Prompt for AI AgentsSource: Linters/SAST tools |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| jobs: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| maintenance: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| runs-on: ubuntu-latest | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Comment on lines
+3
to
+19
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🩺 Stability & Availability | 🟡 Minor | ⚡ Quick win Add a concurrency group to prevent racing auto-commits. This workflow can run on 🛠️ Proposed fix on:
push:
branches:
- main
pull_request:
branches:
- main
schedule:
- cron: '0 2 * * *' # Run daily at 2 AM
+
+concurrency:
+ group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+ cancel-in-progress: false📝 Committable suggestion
Suggested change
🧰 Tools🪛 zizmor (1.26.1)[error] 14-14: overly broad permissions (excessive-permissions): contents: write is overly broad at the workflow level (excessive-permissions) [error] 15-15: overly broad permissions (excessive-permissions): pull-requests: write is overly broad at the workflow level (excessive-permissions) [warning] 14-14: permissions without explanatory comments (undocumented-permissions): needs an explanatory comment (undocumented-permissions) [info] 18-18: workflow or action definition without a name (anonymous-definition): this job (anonymous-definition) [warning] 3-11: insufficient job-level concurrency limits (concurrency-limits): workflow is missing concurrency setting (concurrency-limits) 🤖 Prompt for AI AgentsSource: Linters/SAST tools |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| if: github.repository == github.event.pull_request.head.repo.full_name || github.event_name != 'pull_request' | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| steps: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - name: Checkout Repository | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| uses: actions/checkout@v4 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| with: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| fetch-depth: 0 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| lfs: true | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| ref: ${{ github.head_ref || github.ref }} | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - name: Set up Python | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| uses: actions/setup-python@v5 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| with: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| python-version: '3.12' | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| cache: 'pip' | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - name: Install dependencies | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| run: | | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| python -m pip install --upgrade pip uv | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| uv pip install --system -e ".[dev]" | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| uv pip install --system pydeps cyclonedx-bom | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - name: Install system dependencies | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| run: | | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| sudo apt-get update | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| sudo apt-get install -y xdg-utils graphviz | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - name: Generate Architecture Diagrams | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| run: | | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| mkdir -p docs/architecture | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| pydeps ev_grid_oracle --output docs/architecture/ev_grid_oracle.svg --no-show || true | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| pydeps server --output docs/architecture/server.svg --no-show || true | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - name: Generate SBOM | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| run: | | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| cyclonedx-py environment -o sbom.json | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - name: Auto-fix linting and formatting | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| run: | | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| uv run --with ruff ruff check --fix . || true | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| uv run --with ruff ruff format . || true | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| - name: Commit and Push Changes | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| uses: stefanzweifel/git-auto-commit-action@v5 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| with: | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| commit_message: "Auto-generated repo maintenance artifacts [skip ci]" | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| branch: ${{ github.head_ref || github.ref }} | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
Comment on lines
+61
to
+65
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win 🧩 Analysis chain🌐 Web query:
💡 Result: The branch input for stefanzweifel/git-auto-commit-action expects a branch name rather than a full Git reference (e.g., refs/heads/branch-name) [1][2][3]. According to the official documentation and usage examples, you should provide the short name of the branch (e.g., branch: feature-123) [1][3]. If this input is omitted, the action defaults to the current branch [1][4]. If you intend to push to a branch that does not yet exist, you should also set the create_branch input to true [4][3]. Citations:
🏁 Script executed: #!/bin/bash
set -euo pipefail
# Inspect the workflow around the referenced lines and its triggers.
git ls-files .github/workflows/repo-maintenance.yml
wc -l .github/workflows/repo-maintenance.yml
sed -n '1,120p' .github/workflows/repo-maintenance.ymlRepository: NITISH-R-G/ev-grid-oracle Length of output: 2087 Use a short branch name here
Proposed fix - name: Commit and Push Changes
uses: stefanzweifel/git-auto-commit-action@v5
with:
commit_message: "Auto-generated repo maintenance artifacts [skip ci]"
- branch: ${{ github.head_ref || github.ref }}
+ branch: ${{ github.head_ref || github.ref_name }}📝 Committable suggestion
Suggested change
🧰 Tools🪛 zizmor (1.26.1)[error] 62-62: unpinned action reference (unpinned-uses): action is not pinned to a hash (required by blanket policy) (unpinned-uses) [info] 62-62: action functionality is already included by the runner (superfluous-actions): use (superfluous-actions) 🤖 Prompt for AI Agents |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,20 @@ | ||
| name: Close Stale Issues | ||
|
|
||
| on: | ||
| schedule: | ||
| - cron: '0 0 * * *' | ||
|
|
||
| jobs: | ||
| stale: | ||
| runs-on: ubuntu-latest | ||
| permissions: | ||
| issues: write | ||
| pull-requests: write | ||
| steps: | ||
| - uses: actions/stale@v9 | ||
| with: | ||
| repo-token: ${{ secrets.GITHUB_TOKEN }} | ||
| stale-issue-message: 'This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.' | ||
| stale-pr-message: 'This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.' | ||
| days-before-stale: 60 | ||
| days-before-close: 7 |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,44 @@ | ||
| # Contributor Covenant Code of Conduct | ||
|
|
||
| ## Our Pledge | ||
|
|
||
| We as members, contributors, and leaders pledge to make participation in our | ||
| community a harassment-free experience for everyone, regardless of age, body | ||
| size, visible or invisible disability, ethnicity, sex characteristics, gender | ||
| identity and expression, level of experience, education, socio-economic status, | ||
| nationality, personal appearance, race, caste, color, religion, or sexual | ||
| identity and orientation. | ||
|
|
||
| We pledge to act and interact in ways that contribute to an open, welcoming, | ||
| diverse, inclusive, and healthy community. | ||
|
|
||
| ## Our Standards | ||
|
|
||
| Examples of behavior that contributes to a positive environment for our | ||
| community include: | ||
|
|
||
| * Demonstrating empathy and kindness toward other people | ||
| * Being respectful of differing opinions, viewpoints, and experiences | ||
| * Giving and gracefully accepting constructive feedback | ||
| * Accepting responsibility and apologizing to those affected by our mistakes, | ||
| and learning from the experience | ||
| * Focusing on what is best not just for us as individuals, but for the | ||
| overall community | ||
|
|
||
| Examples of unacceptable behavior include: | ||
|
|
||
| * The use of sexualized language or imagery, and sexual attention or | ||
| advances of any kind | ||
| * Trolling, insulting or derogatory comments, and personal or political attacks | ||
| * Public or private harassment | ||
| * Publishing others' private information, such as a physical or email | ||
| address, without their explicit permission | ||
| * Other conduct which could reasonably be considered inappropriate in a | ||
| professional setting | ||
|
|
||
| ## Enforcement Responsibilities | ||
|
|
||
| Community leaders are responsible for clarifying and enforcing our standards of | ||
| acceptable behavior and will take appropriate and fair corrective action in | ||
| response to any behavior that they deem inappropriate, threatening, offensive, | ||
| or harmful. |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,11 @@ | ||
| # Contributing | ||
|
|
||
| When contributing to this repository, please first discuss the change you wish to make via issue, email, or any other method with the owners of this repository before making a change. | ||
|
|
||
| Please note we have a code of conduct, please follow it in all your interactions with the project. | ||
|
|
||
| ## Pull Request Process | ||
|
|
||
| 1. Ensure your code passes all linting and test rules by running `./validate-submission.sh`. | ||
| 2. Update the README.md with details of changes to the interfaces or features. | ||
| 3. Your Pull Request will be automatically analyzed by our AI Reviewer and other autonomous maintainer systems. Please address their feedback. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🔒 Security & Privacy | 🟡 Minor | ⚡ Quick win
Add a redaction warning before collecting logs.
This public field explicitly asks reporters to paste raw logs, which can easily expose tokens, emails, or internal hostnames. Add a short “please remove secrets/PII first” notice in Line 23 or as a preceding markdown block.
🤖 Prompt for AI Agents