[devantler]

🤖 Generated by the Agentic Engineer

Why

Platform still relies on the legacy Actions repository for four routine automations. Those dependencies must move before that repository can be deleted.

What

Move CI aggregation, releases, task scanning and skill updates to the reviewed maintained catalogue. Preserve their existing inputs, permissions and failure handling.

Part of #5157

[devantler]

🤖 Generated by the Agentic Engineer

@coderabbitai full review

[coderabbitai]

✅ Action performed

Full review finished.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Repository YAML (base), Organization UI (inherited)
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 94d7273b-b734-49fc-8777-c08fc51babaf

📥 Commits

Reviewing files that changed from the base of the PR and between 2bbaa35 and a122005.

📒 Files selected for processing: 6

• .github/workflows/ci.yaml
• .github/workflows/release.yaml
• .github/workflows/todos.yaml
• .github/workflows/update-skills.yaml
• scripts/tests/test-guard-deploy-waits-for-merge-group-validators.sh
• scripts/validate-eks-ci-role-policy/main_test.go

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

📜 Recent review details

⏰ Context from checks skipped due to timeout: 11

• GitHub Check: ⚖️ Validate Cluster Policies
• GitHub Check: 🔐 Validate Flux Credential Bridge
• GitHub Check: 🛟 Validate PodDisruptionBudget Selectors
• GitHub Check: 🔐 Validate Production Authorization
• GitHub Check: 🧩 Validate Helm Post-Renderers
• GitHub Check: 🧪 Validate Manifests
• GitHub Check: 🔬 Validate Nested RGD Templates
• GitHub Check: 🛡️ Validate Repository Guards
• GitHub Check: 🔏 Validate Cosign Matcher Efficacy
• GitHub Check: 🧪 Validate Complete Go Regressions
• GitHub Check: 🔐 Validate Consumer Discovery Regressions

🔇 Additional comments: 6

.github/workflows/ci.yaml: 1

4166-4166: LGTM!

.github/workflows/release.yaml: 1

12-12: LGTM!

.github/workflows/todos.yaml: 1

13-13: LGTM!

.github/workflows/update-skills.yaml: 1

25-25: LGTM!

scripts/tests/test-guard-deploy-waits-for-merge-group-validators.sh: 1

131-131: LGTM!

Also applies to: 205-207

scripts/validate-eks-ci-role-policy/main_test.go: 1

1540-1540: LGTM!

📝 Walkthrough

The CI, release, TODO, and agent-skills workflows now reference shared actions or reusable workflows from devantler-tech/.github at v7.23.0. The shell and Go test checks now recognize the aggregate action under the updated namespace.

Priority: ⬇️ Low

Merge Risk: ⚪ Minimal · up to a1220

The migration is internally consistent across the affected workflows and validation tests, with no identified merge-blocking risk.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly summarizes the main change: completing the migration of Platform automation from the legacy Actions repository.
Description check		The description directly explains why the four automations must move and what the pull request changes while preserving existing configuration.
Docstring Coverage		Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 2 functions across 2 files. (4 skipped: 4 …
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 2 functions across 2 files. (4 skipped: 4 unsupported.)

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[devantler]

🤖 Generated by the Agentic Engineer

Evaluated exact head a122005cec214b70d064d53f03d6045b3063d577.

• Native CI 39522758570 passed. Its actual required-check job successfully used the maintained aggregate action and retained every existing result gate.
• Parsed comparisons confirm that only the four intended caller references changed in the workflows; triggers, inputs, permissions and other fields are identical. The replacement aggregate's source blob is identical to the previous implementation.
• The consumer-fixture wiring suite passes all 32 cases. Authorization regression coverage, including its updated real-aggregator lookup, passes with the race detector; vet and lint pass too.
• CodeRabbit's exact-head review 6305153638 is green. No review threads, body findings or maintainer instructions remain outstanding.
• Self-review confirmed that the negative controls still mutate the real aggregate result, rather than an unrelated action or a nonexistent old location.

The release, task-scanning and updater configurations activate on their normal post-merge events. Their post-merge execution remains part of #5157; this pre-merge CI result is not a claim that those future runs have already happened.