Skip to content

feat(bots): reviewer-bot live workflows (review + follow-up)#828

Closed
eric-wang-1990 wants to merge 1 commit into
eric-wang-1990/reviewer-bot-codefrom
eric-wang-1990/reviewer-bot-live
Closed

feat(bots): reviewer-bot live workflows (review + follow-up)#828
eric-wang-1990 wants to merge 1 commit into
eric-wang-1990/reviewer-bot-codefrom
eric-wang-1990/reviewer-bot-live

Conversation

@eric-wang-1990
Copy link
Copy Markdown

Third and final PR of the stacked reviewer-bot migration (stacked on #827). Adds the live workflows that run the bot on PRs.

Workflows

  • reviewer-bot.yml — reviews on pull_request (opened/synchronize/reopened/ready_for_review) + manual workflow_dispatch (dry-run capable). Fork-guarded; protected runner; mints a peco-review-bot App token; setup-claude-sdk for the SDK/CLI install. Reads/explores the PR's own checkout (no driver clone).
  • reviewer-bot-followup.yml — responds to pull_request_review_comment with the cheap pre-checkout filter + marker-based loop guards.

Adapted from the driver-test workflows: removed the driver-repo clone auth (INTEGRATION_TEST_APP_TOKEN, N/A here) and made MODEL_ENDPOINT a secret rather than a hardcoded workspace URL.

⚠️ Prerequisites — these workflows stay INERT until provisioned

  1. Install the peco-review-bot GitHub App on databricks/databricks-sql-python (Pull requests / Issues / Contents: Read & Write).
  2. Repo secrets: REVIEW_BOT_APP_ID, REVIEW_BOT_APP_PRIVATE_KEY, MODEL_ENDPOINT (the Claude serving-endpoint URL); confirm DATABRICKS_TOKEN is authorized for that endpoint.
  3. Confirm the protected runner's JFrog OIDC provider is available (same runner group as existing CI → very likely).

Verify (after prereqs)

workflow_dispatch with dry_run=true against a sample PR → the bot prints the findings + summary it would post (no writes). Then a live pull_request review.

Recommended landing order

Land #826#827 → this. (Stacked; each rebases onto main as the one below merges.)

This pull request and its description were written by Isaac.

Third of the stacked reviewer-bot migration. Adds the live workflows that run
the bot on PRs:

- reviewer-bot.yml — reviews on pull_request (opened/synchronize/reopened/
  ready_for_review) + manual workflow_dispatch (dry-run capable). Fork-guarded;
  protected runner; mints a peco-review-bot App token; setup-claude-sdk for the
  SDK/CLI install. Reads/explores the PR's own checkout (no driver clone).
- reviewer-bot-followup.yml — responds to pull_request_review_comment with the
  cheap pre-checkout filter + the marker-based loop guards.

Adapted from the driver-test workflows: removed the driver-repo clone auth
(INTEGRATION_TEST_APP_TOKEN — N/A here) and made MODEL_ENDPOINT a secret rather
than a hardcoded workspace URL.

PREREQS (these workflows stay inert until provided):
  - peco-review-bot GitHub App installed on this repo (Pull requests / Issues /
    Contents: Read & Write).
  - Secrets: REVIEW_BOT_APP_ID, REVIEW_BOT_APP_PRIVATE_KEY, MODEL_ENDPOINT;
    DATABRICKS_TOKEN authorized for that serving endpoint.

Co-authored-by: Isaac
Signed-off-by: Eric Wang <e.wang@databricks.com>
@eric-wang-1990
Copy link
Copy Markdown
Author

Superseded by #834 — recreated under gitstack management (clean stack/ branch + linked stack metadata).

@eric-wang-1990 eric-wang-1990 deleted the eric-wang-1990/reviewer-bot-live branch June 4, 2026 18:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant