[PR #14] ci: onboard unreviewed-merge detector #15

New issue

Open

opened 2026-10-26 22:27:52 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-26 22:27:52 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/Comfy-Org/comfy-cloud-mcp/pull/14
Author: @mattmillerai
Created: 6/4/2026
Status: 🔄 Open

Base: main ← Head: chore/onboard-unreviewed-merge-detector

📝 Commits (1)

dfc4973 ci: onboard unreviewed-merge detector

📊 Changes

1 file changed (+24 additions, -0 deletions)

View changed files

➕ .github/workflows/detect-unreviewed-merge.yml (+24 -0)

📄 Description

What

Onboards this repo to the SOC 2 unreviewed-merge detector (Comfy-Org/unreviewed-merges). Adds the ~20-line caller workflow that, on every push to main, opens a tracking issue if the merged PR had no approving review.

Config: branches: [main], approval-mode: latest-per-reviewer (this repo dismisses stale reviews).

Why now

Admin bypass of branch protection was just enabled on this repo, so admins can merge to main without a review. The detector is what keeps those bypasses tracked for compliance — enabling bypass without it leaves a gap.

⚠️ Blocked on a prerequisite (draft)

The org secret UNREVIEWED_MERGES_TOKEN is not yet shared with this repo, so the detector job will fail until an org admin grants it (Org → Settings → Secrets and variables → Actions → UNREVIEWED_MERGES_TOKEN → add this repo). Kept as draft until that's done; mark ready + merge afterward.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/Comfy-Org/comfy-cloud-mcp/pull/14 **Author:** [@mattmillerai](https://github.com/mattmillerai) **Created:** 6/4/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `chore/onboard-unreviewed-merge-detector` --- ### 📝 Commits (1) - [`dfc4973`](https://github.com/Comfy-Org/comfy-cloud-mcp/commit/dfc4973a49d8d2e68741587bcc8d69ff5508f3fd) ci: onboard unreviewed-merge detector ### 📊 Changes **1 file changed** (+24 additions, -0 deletions) <details> <summary>View changed files</summary> ➕ `.github/workflows/detect-unreviewed-merge.yml` (+24 -0) </details> ### 📄 Description ## What Onboards this repo to the SOC 2 **unreviewed-merge detector** ([Comfy-Org/unreviewed-merges](https://github.com/Comfy-Org/unreviewed-merges)). Adds the ~20-line caller workflow that, on every push to `main`, opens a tracking issue if the merged PR had no approving review. Config: `branches: [main]`, `approval-mode: latest-per-reviewer` (this repo dismisses stale reviews). ## Why now Admin bypass of branch protection was just enabled on this repo, so admins can merge to `main` without a review. The detector is what keeps those bypasses tracked for compliance — enabling bypass without it leaves a gap. ## ⚠️ Blocked on a prerequisite (draft) The org secret **`UNREVIEWED_MERGES_TOKEN` is not yet shared with this repo**, so the detector job will fail until an org admin grants it (Org → Settings → Secrets and variables → Actions → `UNREVIEWED_MERGES_TOKEN` → add this repo). Kept as **draft** until that's done; mark ready + merge afterward. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi added the

pull-request

label

2026-10-26 22:27:52 +00:00

No labels

pull-request

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

Comfy-Org/comfy-cloud-mcp#15

No description provided.

Rows
Columns