Skip to content

fix(review): run Noema from trusted product repo#16

Merged
seonghobae merged 1 commit into
mainfrom
agent/noema-central-review-runtime
Jul 15, 2026
Merged

fix(review): run Noema from trusted product repo#16
seonghobae merged 1 commit into
mainfrom
agent/noema-central-review-runtime

Conversation

@seonghobae

Copy link
Copy Markdown
Contributor

변경

  • 기본 브랜치의 repository_dispatch 전용 중앙 Noema 리뷰 런타임을 추가합니다.
  • Current HEAD, 전체 체크, SARIF/Dependabot, 리뷰 스레드와 CodeGraph 근거를 fail-closed로 수집합니다.
  • 모델 요청은 90분을 허용하고 timeout/connection/HTTP 오류 시 독립 GitHub Models 제공자로 전환합니다.
  • App 토큰 범위를 대상 저장소로 제한하고 symlink 및 CodeGraph 자격증명 상속을 차단합니다.

검증

  • Python 3.11: 84 tests, line/branch coverage 100%, docstring 100%
  • Ruff, actionlint, Semgrep: pass / 0 findings
  • Trivy MEDIUM+: 0; npm audit: 0; pip-audit: 0
  • CodeGraph sync/explore 및 git diff --check 통과

@seonghobae seonghobae merged commit f8d94f4 into main Jul 15, 2026
14 checks passed
@seonghobae seonghobae deleted the agent/noema-central-review-runtime branch July 15, 2026 20:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant