GitNexus/.github/workflows
Gergő Magyar 5d1bc3dcea
feat(eval): request PR cost comparisons by label (#3622)
* feat(eval): measure PR cost before merge

Reuse authenticated historical MCP measurements for one pinned PR preview. Keep the protected main evaluator and publish separate evidence that cannot authorize a release.

* fix(eval): gate PR cost runs on a label

Require a repository writer label event and retain the opt-in label
and exact PR head before dispatch and paid sessions. Keep the
request handler on trusted base code and execute evaluation on main.

* ci: document trusted cost label trigger

* fix(eval): restrict previews to maintainer labels

Remove manual PR preview inputs and authorize Maintain/Admin roles before calling the protected reusable evaluator. Compare workflow measurement settings with historical evidence instead of exempting the entire workflow.

---------

Co-authored-by: Gergo Magyar <gergomagyar0@gmail.com>
2026-10-18 11:00:08 +01:00
..
build-tree-sitter-prebuilds.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
ci-devcontainer.yml fix(devcontainer): refresh Node and streamline development (#3610) 2026-10-17 21:05:13 +00:00
ci-e2e.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
ci-quality.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
ci-report.yml fix(ci): require every test to execute across the CI matrix (#3479) 2026-10-06 07:34:17 +03:00
ci-tests.yml fix(taint): report inline and factory handler flows (#3612) 2026-10-17 20:22:58 +00:00
ci.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
claude.yml chore(deps): consolidate pending dependency upgrades (#3441) 2026-10-01 19:16:12 +03:00
codeql.yml fix(release): gate publication on accuracy and paired evaluation (#3503) 2026-10-10 08:26:08 +01:00
commit-fork-prebuilds.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
dependency-review.yml chore(deps): consolidate pending dependency upgrades (#3441) 2026-10-01 19:16:12 +03:00
devcontainer-publish.yml fix(devcontainer): refresh Node and streamline development (#3610) 2026-10-17 21:05:13 +00:00
docker.yml fix(rename): extend safe refactoring and flow coverage across languages (#3557) 2026-10-13 08:38:17 +03:00
gitleaks.yml chore(deps): consolidate pending dependency upgrades (#3441) 2026-10-01 19:16:12 +03:00
gitnexus-review-agent.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
gitnexus-skill-evolution.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
grammar-update-monitor.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
impact-pdg-mutation-report.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
pr-autofix-apply.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
pr-autofix-publish.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
pr-autofix.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
pr-cost-evaluation.yml feat(eval): request PR cost comparisons by label (#3622) 2026-10-18 11:00:08 +01:00
pr-description-check.yml chore(deps): bump actions/github-script from 7.0.1 to 9.0.0 2026-04-15 20:17:08 +00:00
pr-labeler.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
publish.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
release-evaluation.yml feat(eval): request PR cost comparisons by label (#3622) 2026-10-18 11:00:08 +01:00
scorecard.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
skill-sync.yml chore(deps): consolidate ten Dependabot updates and fix compatibility (#3592) 2026-10-15 10:43:04 +01:00
tree-sitter-upgrade-readiness.yml fix(deps): upgrade native tree-sitter to 0.25.1 (#3531) 2026-10-10 13:07:59 +03:00
triage-sweep.yml chore(deps): consolidate pending dependency upgrades (#3441) 2026-10-01 19:16:12 +03:00
trivy.yml chore(deps): consolidate eight dependabot updates (#3525) 2026-10-08 08:19:42 +03:00
workflow-lint.yml chore(deps): consolidate eight dependabot updates (#3525) 2026-10-08 08:19:42 +03:00