feat(bots): onboard reviewer-bot to pinned databricks-bot-engine #3
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Reviewer Bot — initial PR review. | ||
| # | ||
| # Thin caller of the databricks-bot-engine reusable workflow. The engine owns | ||
| # the whole job (security gate, App-token mint, Python setup, engine install, | ||
| # MODEL_ENDPOINT construction, workflow_dispatch input validation, and the | ||
| # PR-head content-root dispatch security); this file is just `on:` + `uses:` + | ||
| # `secrets:`. See docs/superpowers/specs/2026-07-14-onboard-bot-engine-design.md | ||
| # and the databricks-bot-engine README ("Adopting the bots in your repo"). | ||
| # | ||
| # Engine pin: the SHA below is used in BOTH the `uses:` ref AND `engine-ref:` | ||
| # so the workflow and the installed engine match. Bump both in lockstep; never | ||
| # use @main (force-pushable, and the job carries secrets). | ||
| name: Reviewer Bot | ||
| on: | ||
| pull_request: | ||
| types: [opened, synchronize, reopened, ready_for_review] | ||
| workflow_dispatch: | ||
| inputs: | ||
| pr_number: | ||
| description: 'PR number to review' | ||
| required: true | ||
| type: string | ||
| dry_run: | ||
| description: 'Print what would be posted instead of posting' | ||
| required: false | ||
| default: 'true' | ||
| type: string | ||
| permissions: | ||
| contents: read | ||
| pull-requests: write | ||
| id-token: write # JFrog OIDC exchange for the engine/SDK/CLI install | ||
| jobs: | ||
| review: | ||
| uses: databricks/databricks-bot-engine/.github/workflows/reviewer-bot.reusable.yml@d780b2da60bb1ac68bb5cd1acb7cabf495b3ff2d | ||
|
Check failure on line 37 in .github/workflows/reviewer-bot.yml
|
||
| with: | ||
| engine-ref: d780b2da60bb1ac68bb5cd1acb7cabf495b3ff2d | ||
| pr-number: ${{ inputs.pr_number }} # empty on pull_request events | ||
| dry-run: ${{ inputs.dry_run }} | ||
| secrets: | ||
| review-bot-app-id: ${{ secrets.REVIEW_BOT_APP_ID }} | ||
| review-bot-app-private-key: ${{ secrets.REVIEW_BOT_APP_PRIVATE_KEY }} | ||
| databricks-token: ${{ secrets.DATABRICKS_TOKEN }} | ||
| databricks-host: ${{ secrets.DATABRICKS_HOST }} | ||
| engine-pat: ${{ secrets.BOT_ENGINE_PAT }} | ||