chore: update fullsend shim workflow#1767
Conversation
|
🤖 Finished Review · ✅ Success · Started 8:48 AM UTC · Completed 8:53 AM UTC |
Codecov Report✅ All modified and coverable lines are covered by tests.
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
ReviewVerdict: ⛔ Changes requested This PR removes the Apache 2.0 license header (14 comment lines) from Findings🔴 Critical — CI will break: missing license header fails
|
| Dimension | Findings |
|---|---|
| Correctness | 1 critical |
| Security | 0 |
| Intent & coherence | Covered in narrative |
| Style & conventions | 1 medium |
| Docs currency | N/A (no docs changed) |
| Cross-repo contracts | N/A (no APIs changed) |
Previous run
Review — comment
Summary
This PR removes the Apache 2.0 license header (14 comment lines) from .github/workflows/fullsend.yaml to sync with the upstream fullsend shim template. The workflow's functional YAML — permissions, triggers, jobs — is completely unchanged.
Findings
1. [medium] License header removal breaks CI lint check
File: .github/workflows/fullsend.yaml
The make lint target runs addlicense -check across all repo files (excluding only .git/** and .idea/**). Every other workflow file in .github/workflows/ carries the standard Apache 2.0 header with # Copyright The Conforma Contributors. Removing the header from this file causes the lint check to fail — confirmed by the all-tests-and-checks CI job, which has already concluded with failure on this PR's head commit.
Remediation: Either (a) re-add the license header (matching the # Copyright The Conforma Contributors format used by peer files), or (b) add -ignore '.github/workflows/fullsend.yaml' to the LICENSE_IGNORE variable in the Makefile if this file is intentionally template-managed and should be exempt. Option (a) is simpler and consistent with the rest of the repo; option (b) should be coordinated with the fullsend template so future syncs don't re-remove it.
Security
No security concerns. The change is comment-only and does not alter workflow permissions, triggers, job definitions, or any executable step.
Correctness
No functional impact. The YAML content below the removed header is identical before and after this change.
Previous run (2)
Review — comment
Summary
This PR removes the Apache 2.0 license header (14 lines, including the SPDX identifier) from .github/workflows/fullsend.yaml to sync the shim workflow with the upstream template in the .fullsend config repo.
The change is comment-only — no functional impact to the workflow definition. However, it conflicts with the repository's own license-header enforcement.
Findings
⚠ License header removal breaks CI lint check — medium
File: .github/workflows/fullsend.yaml
The repository enforces license headers on all files via addlicense -check (invoked by make lint, which is part of make ci). All 8 other workflow files in .github/workflows/ have the standard header:
# Copyright The Conforma Contributors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# ...
# SPDX-License-Identifier: Apache-2.0Removing the header from fullsend.yaml causes the pre-merge-ci workflow to fail — the all-tests-and-checks job's "Run checks" step (make ci) is currently failing on this PR.
Remediation options:
- Keep the license header — restore the removed block (and optionally add the missing
Copyright The Conforma Contributorsline to match the exact format used by other workflow files). - Exclude the file from
addlicense— add-ignore '.github/workflows/fullsend.yaml'to theLICENSE_IGNOREvariable in theMakefileif the intent is for this file to remain header-free and template-managed. This would need to be a deliberate project decision.
Dimensions reviewed
| Dimension | Result |
|---|---|
| Correctness | ✅ No issues — comment-only change, no logic affected |
| Security | ✅ No issues — no changes to permissions, triggers, or secrets handling |
| Intent & coherence | ⚠ Intent is clear (template sync), but conflicts with repo conventions |
| Style/conventions | ⚠ License header inconsistency with all other workflow files; CI lint failure |
| Documentation | ✅ No documentation impact |
| Cross-repo contracts | ✅ No API or interface changes |
Labels: PR modifies a GitHub Actions workflow file
84062fa to
402ab39
Compare
|
🤖 Finished Review · ✅ Success · Started 3:12 PM UTC · Completed 3:16 PM UTC |
Update the shim workflow to match the current template in the .fullsend config repo.
402ab39 to
48fca3d
Compare
|
🤖 Finished Review · ✅ Success · Started 10:06 AM UTC · Completed 10:14 AM UTC |
| # | ||
| # SPDX-License-Identifier: Apache-2.0 | ||
|
|
||
| # lint-workflow-size: max-lines=280 |
There was a problem hiding this comment.
[critical] CI breakage
Removing the Apache 2.0 license header will cause make lint to fail in CI. The Makefile lint target runs google/addlicense -check on all files (only .git/** and .idea/** are excluded). After this PR, fullsend.yaml has no license header, so addlicense will flag it as missing. The pre-merge-ci.yaml workflow runs make ci (which includes make lint) on every PR to main.
Suggested fix: Either keep the license header (adding the missing # Copyright The Conforma Contributors line to match other workflow files) or add -ignore .github/workflows/fullsend.yaml to LICENSE_IGNORE in the Makefile.
This PR updates the fullsend shim workflow to match the current template in the
.fullsendconfig repo.The shim content has drifted from the template — this brings it back in sync.