@vypdev/copilot 3.9.2 → 3.10.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (21) hide show
  1. package/action.yml +5 -0
  2. package/build/api/index.js +283 -52
  3. package/build/api/src/data/model/application_error.d.ts +22 -1
  4. package/build/api/src/domain/approval_evidence_diagnostic.d.ts +30 -0
  5. package/build/api/src/domain/bugbot/context.d.ts +2 -0
  6. package/build/api/src/domain/bugbot/finding.d.ts +11 -7
  7. package/build/api/src/domain/closed_issue_reconciliation.d.ts +11 -0
  8. package/build/cli/index.js +2451 -288
  9. package/build/github_action/index.js +2891 -287
  10. package/build/web/assets/{index-CsboG2sG.js → index-CNXf8Vmj.js} +1 -1
  11. package/build/web/index.html +1 -1
  12. package/package.json +2 -1
  13. package/setup/actions/copilot-verification-setup/action.yml +13 -0
  14. package/setup/workflows/copilot_commit.yml +2 -0
  15. package/setup/workflows/copilot_issue.yml +2 -0
  16. package/setup/workflows/copilot_issue_comment.yml +20 -106
  17. package/setup/workflows/copilot_pull_request.yml +2 -0
  18. package/setup/workflows/copilot_pull_request_comment.yml +20 -106
  19. package/setup/workflows/copilot_pull_request_review_state.yml +2 -0
  20. package/setup/workflows/hotfix_workflow.yml +1 -0
  21. package/setup/workflows/release_workflow.yml +1 -0
package/build/web/index.html CHANGED
@@ -5,7 +5,7 @@
5
5
  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
6
6
  <meta name="color-scheme" content="light dark" />
7
7
  <title>Copilot · Setup studio</title>
8
- <script type="module" crossorigin src="./assets/index-CsboG2sG.js"></script>
8
+ <script type="module" crossorigin src="./assets/index-CNXf8Vmj.js"></script>
9
9
  <link rel="stylesheet" crossorigin href="./assets/index-CfyclPC5.css">
10
10
  </head>
11
11
  <body>
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@vypdev/copilot",
3
- "version": "3.9.2",
3
+ "version": "3.10.0",
4
4
  "packageManager": "pnpm@10.12.4",
5
5
  "pnpm": {
6
6
  "overrides": {
@@ -40,6 +40,7 @@
40
40
  "build/api/index.js",
41
41
  "build/api/src/",
42
42
  "setup/ISSUE_TEMPLATE/",
43
+ "setup/actions/",
43
44
  "setup/workflows/",
44
45
  "setup/source-workflows/",
45
46
  "setup/pull_request_template.md",
package/setup/actions/copilot-verification-setup/action.yml ADDED
@@ -0,0 +1,13 @@
1
+ # Created once by Copilot setup. This action and its assets belong to your project.
2
+ # Replace the placeholder with reviewed runtime/dependency setup, then merge onto MAIN_BRANCH.
3
+ name: Prepare project verification
4
+ description: Configure project dependencies before enabling VERIFICATION_SETUP.
5
+ runs:
6
+ using: composite
7
+ steps:
8
+ - name: Configure project verification dependencies
9
+ shell: bash
10
+ run: |
11
+ printf '%s\n' 'Configure .github/actions/copilot-verification-setup/action.yml with your project dependencies before enabling VERIFICATION_SETUP.'
12
+ printf '%s\n' 'Replace this failing placeholder, review and merge it onto the configured MAIN_BRANCH, then run a real verification.'
13
+ exit 1
package/setup/workflows/copilot_commit.yml CHANGED
@@ -43,6 +43,7 @@ jobs:
43
43
  # Before Copilot, provision project runtimes/dependencies in this same job when
44
44
  # repository verification is configured. A separate CI job does not prepare it.
45
45
  # Declare reviewed versions in .copilot/verification-prerequisites.json.
46
+ # Optional trusted-main setup: VERIFICATION_SETUP=true and .github/actions/copilot-verification-setup/action.yml.
46
47
  # https://docs.page/vypdev/copilot/security-operations/operations/verification#repository-verification-prerequisites
47
48
  - uses: vypdev/copilot@v3
48
49
  with:
@@ -62,6 +63,7 @@ jobs:
62
63
  chore-tree: ${{ vars.CHORE_TREE || 'chore' }}
63
64
  issue-managed-branches: ${{ vars.ISSUE_MANAGED_BRANCHES || 'true' }}
64
65
  pre-branch-sdd: ${{ vars.PRE_BRANCH_SDD || 'false' }}
66
+ verification-setup: ${{ vars.VERIFICATION_SETUP || 'false' }}
65
67
  reopen-issue-on-push: ${{ vars.REOPEN_ISSUE_ON_PUSH || 'true' }}
66
68
  desired-assignees-count: ${{ vars.DESIRED_ASSIGNEES_COUNT || '1' }}
67
69
  desired-reviewers-count: ${{ vars.DESIRED_REVIEWERS_COUNT || '1' }}
package/setup/workflows/copilot_issue.yml CHANGED
@@ -21,6 +21,7 @@ jobs:
21
21
  # Before Copilot, provision project runtimes/dependencies in this same job when
22
22
  # repository verification is configured. A separate CI job does not prepare it.
23
23
  # Declare reviewed versions in .copilot/verification-prerequisites.json.
24
+ # Optional trusted-main setup: VERIFICATION_SETUP=true and .github/actions/copilot-verification-setup/action.yml.
24
25
  # https://docs.page/vypdev/copilot/security-operations/operations/verification#repository-verification-prerequisites
25
26
  - uses: vypdev/copilot@v3
26
27
  with:
@@ -39,6 +40,7 @@ jobs:
39
40
  chore-tree: ${{ vars.CHORE_TREE || 'chore' }}
40
41
  issue-managed-branches: ${{ vars.ISSUE_MANAGED_BRANCHES || 'true' }}
41
42
  pre-branch-sdd: ${{ vars.PRE_BRANCH_SDD || 'false' }}
43
+ verification-setup: ${{ vars.VERIFICATION_SETUP || 'false' }}
42
44
  issue-workflow-profile: ${{ vars.COPILOT_ISSUE_WORKFLOW_PROFILE || '' }}
43
45
  reopen-issue-on-push: ${{ vars.REOPEN_ISSUE_ON_PUSH || 'true' }}
44
46
  desired-assignees-count: ${{ vars.DESIRED_ASSIGNEES_COUNT || '1' }}
package/setup/workflows/copilot_issue_comment.yml CHANGED
@@ -1,114 +1,28 @@
1
+ # Generated by scripts/generate-native-verification-workflows.cjs
2
+ # Project runtimes: .copilot/verification-prerequisites.json
3
+ # Dependencies: .github/actions/copilot-verification-setup/action.yml
4
+ # https://docs.page/vypdev/copilot/security-operations/operations/verification#repository-verification-prerequisites
1
5
  name: Copilot - Issue Comment
2
-
3
- on:
6
+ 'on':
4
7
  issue_comment:
5
- types: [created, edited]
6
-
8
+ types:
9
+ - created
10
+ - edited
7
11
  jobs:
8
12
  copilot-issues:
9
13
  if: ${{ vars.COPILOT_BOT_LOGIN == '' || github.actor != vars.COPILOT_BOT_LOGIN }}
10
- name: Copilot - Issue Comment
11
- runs-on: ubuntu-latest
12
- timeout-minutes: 120
14
+ uses: vypdev/copilot/.github/workflows/copilot_comment_runtime.yml@v3
13
15
  permissions:
14
16
  checks: write
15
17
  contents: read
16
- steps:
17
- - name: Checkout Repository
18
- uses: actions/checkout@v5
19
- with:
20
- persist-credentials: false
21
- fetch-depth: 0
22
-
23
- # Before Copilot, provision project runtimes/dependencies in this same job when
24
- # repository verification is configured. A separate CI job does not prepare it.
25
- # Declare reviewed versions in .copilot/verification-prerequisites.json.
26
- # https://docs.page/vypdev/copilot/security-operations/operations/verification#repository-verification-prerequisites
27
- - uses: vypdev/copilot@v3
28
- with:
29
- repository-locale: ${{ vars.REPOSITORY_LOCALE || 'en-US' }}
30
- issues-locale: ${{ vars.ISSUES_LOCALE || '' }}
31
- pull-requests-locale: ${{ vars.PULL_REQUESTS_LOCALE || '' }}
32
- ai-ignore-files: ${{ vars.AI_IGNORE_FILES || 'build/*' }}
33
- debug: ${{ vars.DEBUG }}
34
- main-branch: ${{ vars.MAIN_BRANCH || 'master' }}
35
- development-branch: ${{ vars.DEVELOPMENT_BRANCH || 'develop' }}
36
- feature-tree: ${{ vars.FEATURE_TREE || 'feature' }}
37
- bugfix-tree: ${{ vars.BUGFIX_TREE || 'bugfix' }}
38
- hotfix-tree: ${{ vars.HOTFIX_TREE || 'hotfix' }}
39
- release-tree: ${{ vars.RELEASE_TREE || 'release' }}
40
- docs-tree: ${{ vars.DOCS_TREE || 'docs' }}
41
- chore-tree: ${{ vars.CHORE_TREE || 'chore' }}
42
- issue-managed-branches: ${{ vars.ISSUE_MANAGED_BRANCHES || 'true' }}
43
- pre-branch-sdd: ${{ vars.PRE_BRANCH_SDD || 'false' }}
44
- issue-workflow-profile: ${{ vars.COPILOT_ISSUE_WORKFLOW_PROFILE || '' }}
45
- reopen-issue-on-push: ${{ vars.REOPEN_ISSUE_ON_PUSH || 'true' }}
46
- desired-assignees-count: ${{ vars.DESIRED_ASSIGNEES_COUNT || '1' }}
47
- desired-reviewers-count: ${{ vars.DESIRED_REVIEWERS_COUNT || '1' }}
48
- commit-prefix-transforms: ${{ vars.COMMIT_PREFIX_TRANSFORMS || 'replace-slash' }}
49
- ai-pull-request-description-mode: ${{ vars.AI_PULL_REQUEST_DESCRIPTION_MODE || 'replace' }}
50
- ai-members-only: ${{ vars.AI_MEMBERS_ONLY || 'false' }}
51
- ai-include-reasoning: ${{ vars.AI_INCLUDE_REASONING || 'false' }}
52
- bugbot-severity: ${{ vars.BUGBOT_SEVERITY || 'low' }}
53
- bugbot-comment-limit: ${{ vars.BUGBOT_COMMENT_LIMIT || '20' }}
54
- bugbot-fix-verify-commands: ${{ vars.BUGBOT_AUTOFIX_VERIFY_COMMANDS }}
55
- bugbot-dry-run: ${{ vars.BUGBOT_DRY_RUN || 'false' }}
56
- bugbot-effort: ${{ vars.BUGBOT_EFFORT || 'smart' }}
57
- bugbot-review-drafts: ${{ vars.BUGBOT_REVIEW_DRAFTS || 'false' }}
58
- bugbot-trace-rules: ${{ vars.BUGBOT_TRACE_RULES || 'false' }}
59
- bugbot-suggested-changes: ${{ vars.BUGBOT_SUGGESTED_CHANGES || 'true' }}
60
- bugbot-telemetry: ${{ vars.BUGBOT_TELEMETRY || 'true' }}
61
- bugbot-fail-on-unresolved: ${{ vars.BUGBOT_FAIL_ON_UNRESOLVED || 'false' }}
62
- bugbot-organization-rules: ${{ vars.BUGBOT_ORGANIZATION_RULES }}
63
- project-column-issue-created: ${{ vars.PROJECT_COLUMN_ISSUE_CREATED || 'Todo' }}
64
- project-column-pull-request-created: ${{ vars.PROJECT_COLUMN_PULL_REQUEST_CREATED || 'In Progress' }}
65
- project-column-issue-in-progress: ${{ vars.PROJECT_COLUMN_ISSUE_IN_PROGRESS || 'In Progress' }}
66
- project-column-pull-request-in-progress: ${{ vars.PROJECT_COLUMN_PULL_REQUEST_IN_PROGRESS || 'In Progress' }}
67
- agent-provider: ${{ vars.AGENT_PROVIDER || 'codex' }}
68
- agent-model-provider: ${{ vars.AGENT_MODEL_PROVIDER || 'openai' }}
69
- agent-model: ${{ vars.AGENT_MODEL || 'gpt-6-luna' }}
70
- agent-effort: ${{ vars.AGENT_EFFORT }}
71
- agent-executable: ${{ vars.AGENT_EXECUTABLE }}
72
- findings-provider: ${{ vars.FINDINGS_PROVIDER }}
73
- findings-model-provider: ${{ vars.FINDINGS_MODEL_PROVIDER }}
74
- findings-model: ${{ vars.FINDINGS_MODEL }}
75
- findings-effort: ${{ vars.FINDINGS_EFFORT }}
76
- findings-executable: ${{ vars.FINDINGS_EXECUTABLE }}
77
- fixer-provider: ${{ vars.FIXER_PROVIDER }}
78
- fixer-model-provider: ${{ vars.FIXER_MODEL_PROVIDER }}
79
- fixer-model: ${{ vars.FIXER_MODEL }}
80
- fixer-effort: ${{ vars.FIXER_EFFORT }}
81
- fixer-executable: ${{ vars.FIXER_EXECUTABLE }}
82
- planner-provider: ${{ vars.PLANNER_PROVIDER }}
83
- planner-model-provider: ${{ vars.PLANNER_MODEL_PROVIDER }}
84
- planner-model: ${{ vars.PLANNER_MODEL }}
85
- planner-effort: ${{ vars.PLANNER_EFFORT }}
86
- planner-executable: ${{ vars.PLANNER_EXECUTABLE }}
87
- reviewer-provider: ${{ vars.REVIEWER_PROVIDER }}
88
- reviewer-model-provider: ${{ vars.REVIEWER_MODEL_PROVIDER }}
89
- reviewer-model: ${{ vars.REVIEWER_MODEL }}
90
- reviewer-effort: ${{ vars.REVIEWER_EFFORT }}
91
- reviewer-executable: ${{ vars.REVIEWER_EXECUTABLE }}
92
- tester-provider: ${{ vars.TESTER_PROVIDER }}
93
- tester-model-provider: ${{ vars.TESTER_MODEL_PROVIDER }}
94
- tester-model: ${{ vars.TESTER_MODEL }}
95
- tester-effort: ${{ vars.TESTER_EFFORT }}
96
- tester-executable: ${{ vars.TESTER_EXECUTABLE }}
97
- project-ids: ${{ vars.PROJECT_IDS }}
98
- token: ${{ secrets.PAT }}
99
- env:
100
- AGENT_PROVIDER: ${{ vars.AGENT_PROVIDER || 'codex' }}
101
- AGENT_MODEL_PROVIDER: ${{ vars.AGENT_MODEL_PROVIDER || 'openai' }}
102
- AGENT_MODEL: ${{ vars.AGENT_MODEL }}
103
- AGENT_EFFORT: ${{ vars.AGENT_EFFORT }}
104
- AGENT_ALLOWED_MODEL_PROVIDERS: ${{ vars.AGENT_ALLOWED_MODEL_PROVIDERS || 'openai' }}
105
- AGENT_ALLOWED_MODELS: ${{ vars.AGENT_ALLOWED_MODELS || 'openai/gpt-6-luna' }}
106
- AGENT_EXECUTABLE: ${{ vars.AGENT_EXECUTABLE }}
107
- OPENCODE_API_KEY: ${{ secrets.OPENCODE_API_KEY }}
108
- OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
109
- ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
110
- GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
111
- OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
112
- CURSOR_API_KEY: ${{ (vars.AGENT_PROVIDER == 'cursor' || vars.FINDINGS_PROVIDER == 'cursor' || vars.FIXER_PROVIDER == 'cursor' || vars.PLANNER_PROVIDER == 'cursor' || vars.REVIEWER_PROVIDER == 'cursor' || vars.TESTER_PROVIDER == 'cursor') && secrets.CURSOR_API_KEY || '' }}
113
- CODEX_API_KEY: ${{ secrets.CODEX_API_KEY }}
114
- COPILOT_EVIDENCE_TOKEN: ${{ github.token }}
18
+ with:
19
+ runs-on: '"ubuntu-latest"'
20
+ secrets:
21
+ PAT: ${{ secrets.PAT }}
22
+ OPENCODE_API_KEY: ${{ secrets.OPENCODE_API_KEY }}
23
+ OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
24
+ ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
25
+ GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
26
+ OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
27
+ CURSOR_API_KEY: ${{ (vars.AGENT_PROVIDER == 'cursor' || vars.FINDINGS_PROVIDER == 'cursor' || vars.FIXER_PROVIDER == 'cursor' || vars.PLANNER_PROVIDER == 'cursor' || vars.REVIEWER_PROVIDER == 'cursor' || vars.TESTER_PROVIDER == 'cursor') && secrets.CURSOR_API_KEY || '' }}
28
+ CODEX_API_KEY: ${{ secrets.CODEX_API_KEY }}
package/setup/workflows/copilot_pull_request.yml CHANGED
@@ -39,6 +39,7 @@ jobs:
39
39
  # Before Copilot, provision project runtimes/dependencies in this same job when
40
40
  # repository verification is configured. A separate CI job does not prepare it.
41
41
  # Declare reviewed versions in .copilot/verification-prerequisites.json.
42
+ # Optional trusted-main setup: VERIFICATION_SETUP=true and .github/actions/copilot-verification-setup/action.yml.
42
43
  # https://docs.page/vypdev/copilot/security-operations/operations/verification#repository-verification-prerequisites
43
44
  - uses: vypdev/copilot@v3
44
45
  with:
@@ -58,6 +59,7 @@ jobs:
58
59
  chore-tree: ${{ vars.CHORE_TREE || 'chore' }}
59
60
  issue-managed-branches: ${{ vars.ISSUE_MANAGED_BRANCHES || 'true' }}
60
61
  pre-branch-sdd: ${{ vars.PRE_BRANCH_SDD || 'false' }}
62
+ verification-setup: ${{ vars.VERIFICATION_SETUP || 'false' }}
61
63
  reopen-issue-on-push: ${{ vars.REOPEN_ISSUE_ON_PUSH || 'true' }}
62
64
  desired-assignees-count: ${{ vars.DESIRED_ASSIGNEES_COUNT || '1' }}
63
65
  desired-reviewers-count: ${{ vars.DESIRED_REVIEWERS_COUNT || '1' }}
package/setup/workflows/copilot_pull_request_comment.yml CHANGED
@@ -1,114 +1,28 @@
1
+ # Generated by scripts/generate-native-verification-workflows.cjs
2
+ # Project runtimes: .copilot/verification-prerequisites.json
3
+ # Dependencies: .github/actions/copilot-verification-setup/action.yml
4
+ # https://docs.page/vypdev/copilot/security-operations/operations/verification#repository-verification-prerequisites
1
5
  name: Copilot - Pull Request Comment
2
-
3
- on:
6
+ 'on':
4
7
  pull_request_review_comment:
5
- types: [created, edited]
6
-
8
+ types:
9
+ - created
10
+ - edited
7
11
  jobs:
8
12
  copilot-pull-requests:
9
13
  if: ${{ (vars.COPILOT_BOT_LOGIN == '' || github.actor != vars.COPILOT_BOT_LOGIN) && github.event.pull_request.head.repo.full_name == github.repository }}
10
- name: Copilot - Pull Request Comment
11
- runs-on: ubuntu-latest
12
- timeout-minutes: 120
14
+ uses: vypdev/copilot/.github/workflows/copilot_comment_runtime.yml@v3
13
15
  permissions:
14
16
  checks: write
15
17
  contents: read
16
- steps:
17
- - name: Checkout Repository
18
- uses: actions/checkout@v5
19
- with:
20
- persist-credentials: false
21
- fetch-depth: 0
22
-
23
- # Before Copilot, provision project runtimes/dependencies in this same job when
24
- # repository verification is configured. A separate CI job does not prepare it.
25
- # Declare reviewed versions in .copilot/verification-prerequisites.json.
26
- # https://docs.page/vypdev/copilot/security-operations/operations/verification#repository-verification-prerequisites
27
- - uses: vypdev/copilot@v3
28
- with:
29
- repository-locale: ${{ vars.REPOSITORY_LOCALE || 'en-US' }}
30
- issues-locale: ${{ vars.ISSUES_LOCALE || '' }}
31
- pull-requests-locale: ${{ vars.PULL_REQUESTS_LOCALE || '' }}
32
- issue-workflow-profile: ${{ vars.COPILOT_ISSUE_WORKFLOW_PROFILE || '' }}
33
- ai-ignore-files: ${{ vars.AI_IGNORE_FILES || 'build/*' }}
34
- debug: ${{ vars.DEBUG }}
35
- main-branch: ${{ vars.MAIN_BRANCH || 'master' }}
36
- development-branch: ${{ vars.DEVELOPMENT_BRANCH || 'develop' }}
37
- feature-tree: ${{ vars.FEATURE_TREE || 'feature' }}
38
- bugfix-tree: ${{ vars.BUGFIX_TREE || 'bugfix' }}
39
- hotfix-tree: ${{ vars.HOTFIX_TREE || 'hotfix' }}
40
- release-tree: ${{ vars.RELEASE_TREE || 'release' }}
41
- docs-tree: ${{ vars.DOCS_TREE || 'docs' }}
42
- chore-tree: ${{ vars.CHORE_TREE || 'chore' }}
43
- issue-managed-branches: ${{ vars.ISSUE_MANAGED_BRANCHES || 'true' }}
44
- pre-branch-sdd: ${{ vars.PRE_BRANCH_SDD || 'false' }}
45
- reopen-issue-on-push: ${{ vars.REOPEN_ISSUE_ON_PUSH || 'true' }}
46
- desired-assignees-count: ${{ vars.DESIRED_ASSIGNEES_COUNT || '1' }}
47
- desired-reviewers-count: ${{ vars.DESIRED_REVIEWERS_COUNT || '1' }}
48
- commit-prefix-transforms: ${{ vars.COMMIT_PREFIX_TRANSFORMS || 'replace-slash' }}
49
- ai-pull-request-description-mode: ${{ vars.AI_PULL_REQUEST_DESCRIPTION_MODE || 'replace' }}
50
- ai-members-only: ${{ vars.AI_MEMBERS_ONLY || 'false' }}
51
- ai-include-reasoning: ${{ vars.AI_INCLUDE_REASONING || 'false' }}
52
- bugbot-severity: ${{ vars.BUGBOT_SEVERITY || 'low' }}
53
- bugbot-comment-limit: ${{ vars.BUGBOT_COMMENT_LIMIT || '20' }}
54
- bugbot-fix-verify-commands: ${{ vars.BUGBOT_AUTOFIX_VERIFY_COMMANDS }}
55
- bugbot-dry-run: ${{ vars.BUGBOT_DRY_RUN || 'false' }}
56
- bugbot-effort: ${{ vars.BUGBOT_EFFORT || 'smart' }}
57
- bugbot-review-drafts: ${{ vars.BUGBOT_REVIEW_DRAFTS || 'false' }}
58
- bugbot-trace-rules: ${{ vars.BUGBOT_TRACE_RULES || 'false' }}
59
- bugbot-suggested-changes: ${{ vars.BUGBOT_SUGGESTED_CHANGES || 'true' }}
60
- bugbot-telemetry: ${{ vars.BUGBOT_TELEMETRY || 'true' }}
61
- bugbot-fail-on-unresolved: ${{ vars.BUGBOT_FAIL_ON_UNRESOLVED || 'false' }}
62
- bugbot-organization-rules: ${{ vars.BUGBOT_ORGANIZATION_RULES }}
63
- project-column-issue-created: ${{ vars.PROJECT_COLUMN_ISSUE_CREATED || 'Todo' }}
64
- project-column-pull-request-created: ${{ vars.PROJECT_COLUMN_PULL_REQUEST_CREATED || 'In Progress' }}
65
- project-column-issue-in-progress: ${{ vars.PROJECT_COLUMN_ISSUE_IN_PROGRESS || 'In Progress' }}
66
- project-column-pull-request-in-progress: ${{ vars.PROJECT_COLUMN_PULL_REQUEST_IN_PROGRESS || 'In Progress' }}
67
- agent-provider: ${{ vars.AGENT_PROVIDER || 'codex' }}
68
- agent-model-provider: ${{ vars.AGENT_MODEL_PROVIDER || 'openai' }}
69
- agent-model: ${{ vars.AGENT_MODEL || 'gpt-6-luna' }}
70
- agent-effort: ${{ vars.AGENT_EFFORT }}
71
- agent-executable: ${{ vars.AGENT_EXECUTABLE }}
72
- findings-provider: ${{ vars.FINDINGS_PROVIDER }}
73
- findings-model-provider: ${{ vars.FINDINGS_MODEL_PROVIDER }}
74
- findings-model: ${{ vars.FINDINGS_MODEL }}
75
- findings-effort: ${{ vars.FINDINGS_EFFORT }}
76
- findings-executable: ${{ vars.FINDINGS_EXECUTABLE }}
77
- fixer-provider: ${{ vars.FIXER_PROVIDER }}
78
- fixer-model-provider: ${{ vars.FIXER_MODEL_PROVIDER }}
79
- fixer-model: ${{ vars.FIXER_MODEL }}
80
- fixer-effort: ${{ vars.FIXER_EFFORT }}
81
- fixer-executable: ${{ vars.FIXER_EXECUTABLE }}
82
- reviewer-provider: ${{ vars.REVIEWER_PROVIDER }}
83
- reviewer-model-provider: ${{ vars.REVIEWER_MODEL_PROVIDER }}
84
- reviewer-model: ${{ vars.REVIEWER_MODEL }}
85
- reviewer-effort: ${{ vars.REVIEWER_EFFORT }}
86
- reviewer-executable: ${{ vars.REVIEWER_EXECUTABLE }}
87
- planner-provider: ${{ vars.PLANNER_PROVIDER }}
88
- planner-model-provider: ${{ vars.PLANNER_MODEL_PROVIDER }}
89
- planner-model: ${{ vars.PLANNER_MODEL }}
90
- planner-effort: ${{ vars.PLANNER_EFFORT }}
91
- planner-executable: ${{ vars.PLANNER_EXECUTABLE }}
92
- tester-provider: ${{ vars.TESTER_PROVIDER }}
93
- tester-model-provider: ${{ vars.TESTER_MODEL_PROVIDER }}
94
- tester-model: ${{ vars.TESTER_MODEL }}
95
- tester-effort: ${{ vars.TESTER_EFFORT }}
96
- tester-executable: ${{ vars.TESTER_EXECUTABLE }}
97
- project-ids: ${{ vars.PROJECT_IDS }}
98
- token: ${{ secrets.PAT }}
99
- env:
100
- AGENT_PROVIDER: ${{ vars.AGENT_PROVIDER || 'codex' }}
101
- AGENT_MODEL_PROVIDER: ${{ vars.AGENT_MODEL_PROVIDER || 'openai' }}
102
- AGENT_MODEL: ${{ vars.AGENT_MODEL }}
103
- AGENT_EFFORT: ${{ vars.AGENT_EFFORT }}
104
- AGENT_ALLOWED_MODEL_PROVIDERS: ${{ vars.AGENT_ALLOWED_MODEL_PROVIDERS || 'openai' }}
105
- AGENT_ALLOWED_MODELS: ${{ vars.AGENT_ALLOWED_MODELS || 'openai/gpt-6-luna' }}
106
- AGENT_EXECUTABLE: ${{ vars.AGENT_EXECUTABLE }}
107
- OPENCODE_API_KEY: ${{ secrets.OPENCODE_API_KEY }}
108
- OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
109
- ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
110
- GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
111
- OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
112
- CURSOR_API_KEY: ${{ (vars.AGENT_PROVIDER == 'cursor' || vars.FINDINGS_PROVIDER == 'cursor' || vars.FIXER_PROVIDER == 'cursor' || vars.PLANNER_PROVIDER == 'cursor' || vars.REVIEWER_PROVIDER == 'cursor' || vars.TESTER_PROVIDER == 'cursor') && secrets.CURSOR_API_KEY || '' }}
113
- CODEX_API_KEY: ${{ secrets.CODEX_API_KEY }}
114
- COPILOT_EVIDENCE_TOKEN: ${{ github.token }}
18
+ with:
19
+ runs-on: '"ubuntu-latest"'
20
+ secrets:
21
+ PAT: ${{ secrets.PAT }}
22
+ OPENCODE_API_KEY: ${{ secrets.OPENCODE_API_KEY }}
23
+ OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
24
+ ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
25
+ GOOGLE_API_KEY: ${{ secrets.GOOGLE_API_KEY }}
26
+ OPENROUTER_API_KEY: ${{ secrets.OPENROUTER_API_KEY }}
27
+ CURSOR_API_KEY: ${{ (vars.AGENT_PROVIDER == 'cursor' || vars.FINDINGS_PROVIDER == 'cursor' || vars.FIXER_PROVIDER == 'cursor' || vars.PLANNER_PROVIDER == 'cursor' || vars.REVIEWER_PROVIDER == 'cursor' || vars.TESTER_PROVIDER == 'cursor') && secrets.CURSOR_API_KEY || '' }}
28
+ CODEX_API_KEY: ${{ secrets.CODEX_API_KEY }}
package/setup/workflows/copilot_pull_request_review_state.yml CHANGED
@@ -27,6 +27,7 @@ jobs:
27
27
  # Before Copilot, provision project runtimes/dependencies in this same job when
28
28
  # repository verification is configured. A separate CI job does not prepare it.
29
29
  # Declare reviewed versions in .copilot/verification-prerequisites.json.
30
+ # Optional trusted-main setup: VERIFICATION_SETUP=true and .github/actions/copilot-verification-setup/action.yml.
30
31
  # https://docs.page/vypdev/copilot/security-operations/operations/verification#repository-verification-prerequisites
31
32
  - uses: vypdev/copilot@v3
32
33
  with:
@@ -46,6 +47,7 @@ jobs:
46
47
  chore-tree: ${{ vars.CHORE_TREE || 'chore' }}
47
48
  issue-managed-branches: ${{ vars.ISSUE_MANAGED_BRANCHES || 'true' }}
48
49
  pre-branch-sdd: ${{ vars.PRE_BRANCH_SDD || 'false' }}
50
+ verification-setup: ${{ vars.VERIFICATION_SETUP || 'false' }}
49
51
  reopen-issue-on-push: ${{ vars.REOPEN_ISSUE_ON_PUSH || 'true' }}
50
52
  desired-assignees-count: ${{ vars.DESIRED_ASSIGNEES_COUNT || '1' }}
51
53
  desired-reviewers-count: ${{ vars.DESIRED_REVIEWERS_COUNT || '1' }}
package/setup/workflows/hotfix_workflow.yml CHANGED
@@ -179,6 +179,7 @@ jobs:
179
179
  uses: vypdev/copilot@v3
180
180
  with:
181
181
  single-action: published_deployment_action
182
+ merge-queue-check-attestations: ${{ vars.MERGE_QUEUE_CHECK_ATTESTATIONS || '[]' }}
182
183
  single-action-issue: ${{ inputs.issue }}
183
184
  issue-workflow-profile: ${{ vars.COPILOT_ISSUE_WORKFLOW_PROFILE || '' }}
184
185
  single-action-operation-id: ${{ inputs.operation-id }}
package/setup/workflows/release_workflow.yml CHANGED
@@ -179,6 +179,7 @@ jobs:
179
179
  uses: vypdev/copilot@v3
180
180
  with:
181
181
  single-action: published_deployment_action
182
+ merge-queue-check-attestations: ${{ vars.MERGE_QUEUE_CHECK_ATTESTATIONS || '[]' }}
182
183
  single-action-issue: ${{ inputs.issue }}
183
184
  issue-workflow-profile: ${{ vars.COPILOT_ISSUE_WORKFLOW_PROFILE || '' }}
184
185
  single-action-operation-id: ${{ inputs.operation-id }}