diff --git a/.github/workflows/pr-review-hosted.yml b/.github/workflows/pr-review-hosted.yml index a85c50c0150..7ee29f2593d 100644 --- a/.github/workflows/pr-review-hosted.yml +++ b/.github/workflows/pr-review-hosted.yml @@ -243,6 +243,8 @@ jobs: # Copies scripts/sync-shared-copies.sh generates, read at the merge base: # identical changes to copies of one source are read once, hooks included. generated-copies: scripts/shared-copies.txt + # Generated data files counted as read, read at the merge base. + generated-data: scripts/review-generated-data.txt # A hold adds this label and a `claude-lane-hold` marker comment; ci-status # fails while the label is on. The review holds only for a real-charge # cost or a CRITICAL security finding; hold-paths names the files the diff --git a/.github/workflows/pr-review-security-hosted.yml b/.github/workflows/pr-review-security-hosted.yml index 0aa1b514e3a..2cd8ebdb9a0 100644 --- a/.github/workflows/pr-review-security-hosted.yml +++ b/.github/workflows/pr-review-security-hosted.yml @@ -243,6 +243,8 @@ jobs: # Copies scripts/sync-shared-copies.sh generates, read at the merge base: # identical changes to copies of one source are read once, hooks included. generated-copies: scripts/shared-copies.txt + # Generated data files counted as read, read at the merge base. + generated-data: scripts/review-generated-data.txt # A hold adds this label and a `claude-lane-hold` marker comment; ci-status # fails while the label is on. The review holds only for a real-charge # cost or a CRITICAL security finding; hold-paths names the files the diff --git a/scripts/review-generated-data.txt b/scripts/review-generated-data.txt new file mode 100644 index 00000000000..c675feb2fd3 --- /dev/null +++ b/scripts/review-generated-data.txt @@ -0,0 +1,7 @@ +# Generated data files the review lanes count as read without reading them, +# read at the merge base (ci-workflows pr-review-cli.yml `generated-data`). +# One repo-relative path per line. A listed file's loader checks its structure +# only, never its content, so a path stays listed only while the one commit that +# adds the file lands, and is removed once that commit is on main; later edits +# are then reviewed in full. +plugins/source-control/skills/babysit-prs/scripts/verify-legacy-fails.json