diff --git a/.github/workflows/pr-review.yml b/.github/workflows/pr-review.yml index b7e8e297..92c7650c 100644 --- a/.github/workflows/pr-review.yml +++ b/.github/workflows/pr-review.yml @@ -5,18 +5,19 @@ on: pull_request_review_comment: # Captures feedback on review comments for learning types: [created] pull_request: # Triggers auto-review on PR open (same-repo branches only; fork PRs use /review) - types: [ready_for_review, opened] + types: [ready_for_review, opened, review_requested] permissions: contents: read # Required at top-level so `issue_comment` events can read repository contents. jobs: review: - uses: docker/cagent-action/.github/workflows/review-pr.yml@d98096f432f2aea5091c811852c4da804e60623a # v1.4.1 - # Scoped to the job so other jobs in this workflow aren't over-permissioned + uses: docker/docker-agent-action/.github/workflows/review-pr.yml@e96a4bb40cac114f64358621e1d08346c8eadc8c # v2.0.1 + # Scoped to the job so other jobs in this workflow are not over-permissioned permissions: contents: read # Read repository files and PR diffs pull-requests: write # Post review comments and approve/request changes issues: write # Create security incident issues if secrets are detected in output checks: write # (Optional) Show review progress as a check run on the PR id-token: write # Required for OIDC authentication to AWS Secrets Manager + actions: read # Required for the reusable workflow