Skip to content

ci: OpenCode test workflow - #1382

Merged
EttyKitty merged 3 commits into
Adeptus-Dominus:mainfrom
EttyKitty:pr/opencode
Jul 24, 2026
Merged

ci: OpenCode test workflow#1382
EttyKitty merged 3 commits into
Adeptus-Dominus:mainfrom
EttyKitty:pr/opencode

Conversation

@EttyKitty

@EttyKitty EttyKitty commented Jul 24, 2026

Copy link
Copy Markdown
Collaborator

Summary by cubic

Adds an opencode GitHub Actions workflow to run OpenCode on demand from issue and PR review comments. Uses anomalyco/opencode/github@v1.18.4 with model opencode/deepseek-v4-flash-free and the OPENCODE_API_KEY secret.

  • New Features
    • Triggers only when the comment starts with /oc or /opencode.
    • Secure setup with actions/checkout@v6 (shallow clone, no persisted creds) and id-token: write; action pinned to v1.18.4.

Written for commit 3137622. Summary will update on new commits.

Review in cubic

@github-actions github-actions Bot added Type: CI Continuous Integration changes Size: Tiny labels Jul 24, 2026
Comment thread .github/workflows/opencode.yml Outdated
Comment thread .github/workflows/opencode.yml Outdated
@kilo-code-bot

kilo-code-bot Bot commented Jul 24, 2026

Copy link
Copy Markdown
Contributor

Code Review Roast 🔥

Verdict: No Issues Found | Recommendation: Merge

Oh wait, this PR is actually clean. I need to sit down. I had my flamethrower warmed up and everything.

📊 Overall: Like finding a unicorn in production — I didn't think clean PRs existed anymore, but here we are.

Files Reviewed (1 file)
  • .github/workflows/opencode.yml
Previous Review Summary (commit 3bcb2ad)

Current summary above is authoritative. Previous snapshots are kept for context only.

Previous review (commit 3bcb2ad)

Verdict: 2 Issues Found | Recommendation: Address before merge

Overview

Severity Count
⚠️ warning 1
💡 suggestion 1
🚨 critical 0
🤏 nitpick 0
Issue Details (click to expand)
File Line Roast
.github/workflows/opencode.yml 12 contains for /oc matches any substring, triggering on innocent words like /occasionally
.github/workflows/opencode.yml 25 @latest on a third-party action is a supply-chain security risk — any new version is pulled in with zero review

🏆 Best part: At least the actions/checkout@v6 is from the official repo and uses persist-credentials: false. I was this close to having to roast your checkout hygiene, and you narrowly escaped.

💀 Worst part: The @latest tag on anomalyco/opencode/github. Using @latest on a third-party action is the CI/CD equivalent of running curl | bash — sure, it works today, but you're one compromised release away from a very bad day.

📊 Overall: This workflow has good bones but two classic new-to-GitHub-Actions mistakes. Fix the command matching to avoid false triggers, pin that action to a SHA, and this will be a clean addition.

Files Reviewed (1 file)
  • .github/workflows/opencode.yml - 2 issues

Fix these issues in Kilo Cloud


Reviewed by step-3.7-flash · Input: 51.7K · Output: 8.1K · Cached: 140.5K

Co-authored-by: kilo-code-bot[bot] <240665456+kilo-code-bot[bot]@users.noreply.github.com>
Comment thread .github/workflows/opencode.yml
Comment thread .github/workflows/opencode.yml
Updated the OpenCode GitHub Action to use a specific version and modified the condition for job execution.

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review completed against the latest diff

Reply with feedback, questions, or to request a fix.

Re-trigger cubic

Comment thread .github/workflows/opencode.yml

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

0 issues found across 1 file (changes from recent commits).

Confidence score: 5/5

  • Automated review surfaced no issues in the provided summaries.
  • No files require special attention.

Requires human review: Auto-approval blocked by 1 unresolved issue from previous reviews.

Re-trigger cubic

@EttyKitty
EttyKitty merged commit c179faa into Adeptus-Dominus:main Jul 24, 2026
7 checks passed
@EttyKitty
EttyKitty deleted the pr/opencode branch July 24, 2026 11:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Size: Tiny Type: CI Continuous Integration changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant