spawn/.github/workflows
L f69f95c7c7
refactor: Simplify security workflow to match discovery/refactor pattern (#929)
Move mode-detection logic from the GitHub Actions workflow into
security.sh where it belongs. The workflow now passes github.event_name
directly as the reason parameter (like discovery.yml and refactor.yml),
and security.sh uses `gh issue view` to check labels when reason=issues.

- Remove 25-line if/elif/else reason-mapping block from security.yml
- Remove workflow_dispatch mode input (server-side handles it)
- Add `if:` label guard for issues (safe-to-work + team-building/security)
- Add `labeled` to issue trigger types
- Set cancel-in-progress: false (prevents killing long review_all runs)
- Bump cron to */5
- Handle schedule/workflow_dispatch → review_all in security.sh
- Keep backwards compat for direct team_building/triage reasons

Co-authored-by: Security Reviewer <security-reviewer@spawn.dev>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-02-13 05:26:21 -08:00
..
cli-release.yml fix: download pre-built CLI from GitHub release when local build fails (#728) 2026-02-12 13:48:45 -08:00
discovery.yml feat: add security triage gate for issue safety before agent processing (#734) 2026-02-12 14:23:33 -08:00
lint.yml ci: add shellcheck linting infrastructure 2026-02-08 01:08:34 +00:00
qa.yml QA-Bot setup (#335) 2026-02-10 19:51:07 -08:00
refactor.yml feat: security triage applies full label taxonomy (#766) 2026-02-12 16:20:07 -08:00
security.yml refactor: Simplify security workflow to match discovery/refactor pattern (#929) 2026-02-13 05:26:21 -08:00