Repository navigation
chore: add Wiz sensor step to GitHub Actions jobs (INFRA-4215) - #16
Open
javiergarciavera wants to merge 3 commits into
Open
javiergarciavera wants to merge 3 commits into
javiergarciavera wants to merge 3 commits into
Conversation
Adds a gated, fail-open Wiz runner sensor step as the first step of Linux GitHub-hosted jobs. It is a no-op until WIZ_SENSOR_ENABLED is true. INFRA-4215 Co-Authored-By: Claude <noreply@anthropic.com>
Pin to the merge commit of Web3Auth/.github#5. INFRA-4215 Co-Authored-By: Claude <noreply@anthropic.com>
javiergarciavera
marked this pull request as ready for review
October 21, 2026 15:40
Empty commit to trigger workflows. INFRA-4215 Co-Authored-By: Claude <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Motivation and Context
Run the Wiz runner sensor on Linux GitHub-hosted runners across the Web3Auth org, controlled by one org-level switch (INFRA-4215).
Jira Link: https://consensyssoftware.atlassian.net/browse/INFRA-4215
Description
Adds a
Wiz sensorstep as the first step of each job that runs on a Linux GitHub-hosted runner. The step calls the composite action inWeb3Auth/.github(PR #5).WIZ_SENSOR_ENABLEDistrueand the org secretWIZ_SENSOR_TOKENis set. Until then every job logsSkipped because WIZ_SENSOR_ENABLED is not true.and runs as before.WIZ_SENSOR_ENABLEDtofalsedisables it everywhere with no workflow change.pull_request_targetworkflows are not touched.Draft until PR #5 is merged. The action is pinned to the commit on the PR #5 branch. Before this PR is marked ready, the pin is updated to the merge commit of PR #5.
How has this been tested?
YAML parses for every changed file, the diff is additions only, and the sensor is the first step of every changed job. The step is a no-op while
WIZ_SENSOR_ENABLEDis unset, so CI should pass unchanged. Not yet run with the sensor enabled; that happens in the Phase 3 pilot.Types of changes
Note
Low Risk
Workflow-only additions gated by an org variable; no application or build logic changes, and the sensor is intended to fail open.
Overview
Adds the org Wiz sensor composite action as the first step on every Linux (
ubuntu-latest) job inlintcheck.yaml,unity-build.yml(license check + matrix build jobs), andvalidate-examples.yml.Each step is pinned to
Web3Auth/.githubwiz-sensor@v1.0.0and wired to org controls:vars.WIZ_SENSOR_ENABLEDandsecrets.WIZ_SENSOR_TOKEN. With the flag off or unset, jobs should behave as today; when enabled, runners can run the sensor without reordering existing checkout/build/validate steps.Reviewed by Cursor Bugbot for commit b2b16ae. Bugbot is set up for automated code reviews on this repo. Configure here.