Skip to content
PR Issue Acceptance

fix(sandbox): check every backend confirmation against the launch #965

Sign in to view logs

fix(sandbox): check every backend confirmation against the launch

fix(sandbox): check every backend confirmation against the launch #965

Workflow file for this run

.github/workflows/pr-issue-acceptance.yml at ddb9f71
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.

Check warning on line 1 in .github/workflows/pr-issue-acceptance.yml

View workflow run for this annotation

GitHub Actions / PR Issue Acceptance

Workflow execution policy warning (evaluate mode) 

On December 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
# SPDX-License-Identifier: Apache-2.0
name: PR Issue Acceptance
on:
pull_request_target:
types: [opened, edited, reopened, synchronize]
permissions:
contents: read
issues: read
pull-requests: read
concurrency:
group: pr-issue-acceptance-${{ github.event.pull_request.number }}
cancel-in-progress: true
jobs:
issue-acceptance:
name: OpenShell / PR Issue Acceptance
timeout-minutes: 5
if: github.repository_owner == 'NVIDIA'
runs-on: ubuntu-latest
steps:
# pull_request_target supplies the trusted default-branch SHA. Load
# only that helper; PR metadata is data, never executable code.
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
ref: ${{ github.sha }}
persist-credentials: false
sparse-checkout: tasks/scripts/check_issue_acceptance.cjs
sparse-checkout-cone-mode: false
- name: Check author access and linked issue acceptance
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
with:
script: |
const check = require('./tasks/scripts/check_issue_acceptance.cjs');
await check({ github, context, core });