Skip to content

fix(oidc): allow exact PR review workflow SHA#98

Merged
Pigbibi merged 2 commits into
mainfrom
codex/aiauditbridge-pr-review-oidc-sha-allowlist-20260726
Jul 26, 2026
Merged

fix(oidc): allow exact PR review workflow SHA#98
Pigbibi merged 2 commits into
mainfrom
codex/aiauditbridge-pr-review-oidc-sha-allowlist-20260726

Conversation

@Pigbibi

@Pigbibi Pigbibi commented Jul 26, 2026

Copy link
Copy Markdown
Contributor

Summary

  • persist the authorized immutable AIAuditBridge PR-review workflow SHA in both deploy allowlists
  • cover exact-SHA acceptance, unlisted-ref denial, and workflow/deploy parity

Validation

  • PYTHONDONTWRITEBYTECODE=1 PYTHONPATH=scripts python3 -m pytest -p no:cacheprovider -q tests/test_oidc_reusable_workflow_auth.py tests/test_run_monthly_codex_audit.py
  • python3 -m compileall -q scripts tests
  • bash -n scripts/deploy_codex_audit_service.sh
  • git diff --check
  • actionlint .github/workflows/vps_codex_service_ops.yml

Co-Authored-By: Codex <noreply@openai.com>
@github-actions

github-actions Bot commented Jul 26, 2026

Copy link
Copy Markdown

🤖 Codex PR Review

Merge allowed: No issues found


Review by Codex PR Review bot • PR

…r-review-oidc-sha-allowlist-20260726

Co-Authored-By: Codex <noreply@openai.com>
@Pigbibi
Pigbibi merged commit 5eeea47 into main Jul 26, 2026
5 checks passed
@Pigbibi
Pigbibi deleted the codex/aiauditbridge-pr-review-oidc-sha-allowlist-20260726 branch July 26, 2026 07:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant