CodeIssuesPull RequestsActionsSecurityInsights
✨ AI
More
Settings

ci: auto-approve workflow to bypass solo-dev review gate #4687

Draft⚡ AI-generatedSccantynz wants to mergecopilot/bypass-review-blockmain↑2 ↓9opened Mar 9, 20263/7 tasksLive: 0 editing
ccantynzcommented Mar 9, 2026

Originally written by @Copilot on GitHub.
Imported from https://github.com/ccantynz-alt/Dominat8.com/pull/15


What changed?

  • Small fix
  • Feature
  • Refactor
  • Infra / CI

Branch protection on main requires 1 approving review. Solo developer can't self-approve → all merges blocked.

Added .github/workflows/auto-approve.yml: on every PR, github-actions[bot] submits an APPROVE review, satisfying the gate.

  • Scoped to repo owner only (github.event.pull_request.user.login == github.repository_owner) — external contributor PRs still require manual review
  • Triggers on opened, synchronize, reopened
  • Uses actions/github-script@v7 with pull-requests: write

Quality gates (must be green)

  • CI build is green
  • No unexpected UI/design changes on Dominat8.com
  • If protected paths changed: override label OR ALLOW_PROTECTED_PATHS file added with reason

Notes / risks

  • If branch protection also requires code owner review (not just any review), github-actions[bot] won't satisfy it since it's not listed in CODEOWNERS. In that case, the "Require review from Code Owners" setting would need to be disabled in repo settings.
  • The GITHUB_TOKEN permission (pull-requests: write) is the minimum required scope.

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

ccantynzcommented Mar 9, 2026

Originally written by @vercel[bot] on GitHub.


The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
dominat8com Ready Ready Preview, Comment Mar 14, 2026 7:30am

Request Review

Files changed

Side-by-side diff for copilot/bypass-review-block → main.

View diff →

Cross-repo impact

See what breaks downstream if this PR merges.

Analyze →
Risk score: LOW (2/10)e268112
Touches 1 file(s) with 26 added and 0 removed across 0 owner(s). Includes a new dependency. No tests were added for the new code.
See full signal breakdown
  • files changed: 1
  • lines added/removed: 26 / 0
  • distinct owners touched: 0
  • schema migration touched: no
  • locked / sensitive path touched: no
  • adds new dependency: yes
  • bumps major dependency: no
  • tests added for new code: no
  • diff-minus-test ratio: 1.00
How is this calculated? The score is a transparent sum of weighted signals — see src/lib/pr-risk.ts computePrRiskScore.

Gate checks

All 6 checks passed
GateTestDisabled in settingsSkipped
Secret scanNo secrets detectedPassed
Security scanStatic rules ran (8 checks, no AI required) — no static findings. AI review unavailable: The platform's AI balance is exhausted, so AI generation is temporarily unavailable. Nothing was lost. You can queue this as a repair for the internal agent from the repository's Health page, or try again once the balance is restored.Skipped
Merge checkClean merge possiblePassed
CINo CI workflows are configured for this repositorySkipped
AI ReviewAIAI review approvedPassed
c comment · e edit title · m merge · a approve · r request changes · ? shortcuts