Skip to content

Pass OPENAI_API_KEY to the PR risk workflow - #546

Open
rgarcia wants to merge 1 commit into
mainfrom
hypeship/pr-risk-openai-key
Open

rgarcia wants to merge 1 commit into
mainfrom
hypeship/pr-risk-openai-key

Conversation

@rgarcia

@rgarcia rgarcia commented Nov 6, 2026

Copy link
Copy Markdown
Contributor

Summary

Passes OPENAI_API_KEY to the shared PR risk workflow.

kernel/security-workflows#29 (merged) moved pr-risk.yml from Claude Code to pi. The classifier now runs with the PI_PREFERRED_MODEL organization variable, which is currently an OpenAI model, so the reusable workflow needs this key to classify PRs. OPENAI_API_KEY is declared there as an optional secret alongside ANTHROPIC_API_KEY. Until this merges, eligible PRs in this repo get a "Not assessed" PR-risk comment or a failed classify job. The workflow is shadow-mode only, so nothing is blocked.

Validation

  • actionlint passes on .github/workflows/pr-risk.yml.
  • The PR-risk check on this PR is the first run with the key. Its result shows whether OPENAI_API_KEY is visible to this repo. This PR edits .github/, which is deny-listed, so expect a passing run with no comment.

@rgarcia
rgarcia requested a review from tnsardesai November 6, 2026 15:03
@rgarcia

rgarcia commented Nov 6, 2026

Copy link
Copy Markdown
Contributor Author

Picked tnsardesai to review these related PRs (kernel/kernel#5332, kernel/infra#2053, #546, kernel/kernel-images-private#576): touched the changed code in workflows; 7 pending

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant