Skip to content

Conversation

@workos-sdk-automation
Copy link
Contributor

Summary

  • Adds a lint-pr-title workflow using amannn/action-semantic-pull-request to enforce conventional commit format on PR titles
  • Uses the SDK bot app token (via actions/create-github-app-token) for authentication, consistent with the release-please workflow
  • This ensures PR titles follow the conventional commits spec, which is required for release-please to generate correct changelogs and version bumps

Test plan

  • Open a PR with a non-conventional title (e.g., "update something") and verify the check fails
  • Open a PR with a valid conventional title (e.g., "feat: add feature") and verify the check passes

Uses the SDK bot app token with amannn/action-semantic-pull-request
to enforce conventional commit format on PR titles, which is required
for release-please to work correctly.
@greptile-apps
Copy link

greptile-apps bot commented Feb 9, 2026

Greptile Overview

Greptile Summary

Adds a new GitHub Actions workflow (.github/workflows/lint-pr-title.yml) that runs on pull_request_target events and uses a GitHub App token (via actions/create-github-app-token) to run amannn/action-semantic-pull-request, enforcing conventional-commit style PR titles so release-please can generate correct changelogs/version bumps.

This integrates alongside the existing CI and release-please workflows by adding a dedicated PR-title gate/check, without changing build/test behavior.

Confidence Score: 4/5

  • This PR is largely safe to merge, with a small but concrete hardening gap in the workflow permissions.
  • The change is isolated to a single GitHub Actions workflow and should not affect runtime code. The only issue found is missing explicit minimal permissions, which can leave the workflow running with broader-than-needed token privileges in pull_request_target context.
  • .github/workflows/lint-pr-title.yml

Important Files Changed

Filename Overview
.github/workflows/lint-pr-title.yml Adds a PR title lint workflow using pull_request_target and a GitHub App token. Main concern: lacks explicit minimal permissions: block, so token permissions may be broader than necessary.

Sequence Diagram

sequenceDiagram
  participant GH as GitHub
  participant WF as lint-pr-title workflow
  participant AG as actions/create-github-app-token
  participant SP as amannn/action-semantic-pull-request

  GH->>WF: pull_request_target (opened/edited/synchronize)
  WF->>AG: Generate GitHub App installation token
  AG-->>WF: token
  WF->>SP: Validate PR title (using token)
  SP-->>GH: Check result (pass/fail)
Loading

Copy link

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 file reviewed, 1 comment

Edit Code Review Agent Settings | Greptile

@gjtorikian gjtorikian merged commit 4972e11 into main Feb 9, 2026
4 checks passed
@gjtorikian gjtorikian deleted the add-lint-pr-title-workflow branch February 9, 2026 21:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

1 participant