pydantic--pydantic-ai/.github/workflows/pydantic-ai-pr-review.md

emoji, name, description, on, if, permissions, concurrency, tools, safe-outputs, timeout-minutes, imports, pre-steps, pre-agent-steps, jobs

emoji	name	description	on	if	permissions	concurrency	tools	safe-outputs	timeout-minutes	imports	pre-steps	pre-agent-steps	jobs
🔎	Pydantic AI PR Review	AI-driven PR review on the Pydantic AI gh-aw shim: inline comments + a single review verdict. Prompt iterable from a Logfire managed variable; read-only via gh-aw safe-outputs.	pull_request workflow_dispatch roles types opened synchronize ready_for_review admin maintainer write	${{ !contains(github.event.pull_request.labels.*.name, 'auto-review') }}	contents pull-requests issues read read read	group cancel-in-progress ${{ github.workflow }}-pr-review-${{ github.event.pull_request.number || github.ref }} true	github mode toolsets gh-proxy pull_requests repos search issues	footer activation-comments noop create-pull-request-review-comment submit-pull-request-review false false max 30 supersede-older-reviews max true 1	30	shared/network-vendor-domains.md shared/otel-logfire.md shared/tool-hints.md shared/repo-context.md shared/rigor.md shared/review-context.md shared/checkout.md shared/engine-minimax.md shared/pre-steps.md shared/pre-agent-steps.md	name run Install AWF firewall binary (skipped by custom engine.command) bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.25.46	name run Stage Pydantic AI gh-aw shim launcher mkdir -p /tmp/gh-aw/bin install -m 755 .github/scripts/pydantic-ai-runner-launch.sh /tmp/gh-aw/bin/pydantic-ai-runner-launch name run Pre-warm Pydantic AI gh-aw shim uv environment bash .github/scripts/prewarm-pydantic-ai-runner.sh name if env run Gather PR review context ${{ github.event.pull_request.number }} GH_TOKEN PR_NUMBER REPO ${{ github.token }} ${{ github.event.pull_request.number }} ${{ github.repository }} set -uo pipefail # Diagnostic: log the workspace state of both scripts/ and .github/scripts/ # so we can verify the gh-aw restore-from-base step left them untouched. echo "::group::workspace inventory at gather time" ls -la scripts/ 2>&1 | head -50 || true echo "---" ls -la .github/scripts/ 2>&1 | head -50 || true echo "::endgroup::" script=scripts/gather-pydantic-ai-review-context.sh if [ -x "$script" ]; then "$script" "$PR_NUMBER" "$REPO" \ || echo "::warning::${script} failed; reviewer will run with less context" else echo "::warning::${script} not present; reviewer will run with less context" fi	fetch_dynamic_prompt runs-on timeout-minutes permissions outputs steps ubuntu-latest 5 contents read dynamic_prompt ${{ steps.resolve.outputs.dynamic_prompt }} name uses with Check out the prompt resolver action and default prompt actions/checkout@de0fac2e45 persist-credentials sparse-checkout sparse-checkout-cone-mode false .github/actions/fetch-dynamic-prompt .github/workflows/shared/prompts/pydantic-ai-pr-review.md false name id uses with Resolve agent prompt (Logfire managed variable, else committed default) resolve ./.github/actions/fetch-dynamic-prompt logfire-variable-key default-prompt-file logfire-read-key logfire-base-url gh_aw_pydantic_ai_pr_review_prompt .github/workflows/shared/prompts/pydantic-ai-pr-review.md ${{ secrets.LOGFIRE_READ_EXTERNAL_VARIABLES }} ${{ secrets.LOGFIRE_URL || vars.LOGFIRE_URL || 'https://logfire-api.pydantic.dev' }}

${{ needs.fetch_dynamic_prompt.outputs.dynamic_prompt }}