Repository navigation
Conversation
Pin actions to commit SHAs, use the current create-github-app-token inputs (client-id) instead of copying older workflows, dispatch deploys to IgniteUI/igniteui-actions and validate workflows with actionlint. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This was referenced Oct 30, 2026
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Adds a short GitHub Actions workflows section to the Working Rules in
AGENTS.md:# vX.Y.Zcomment.actions/create-github-app-tokentakesclient-id: ${{ secrets.IGNITEUI_GITHUB_APP_CLIENT_ID }};app-idis deprecated since v3.1.0.repository_dispatchtoIgniteUI/igniteui-actions.actionlint.Motivation / Context
The review of the SassDoc deploy (#17891 and its igniteui-actions counterpart) found two problems in the agent-written workflow:
app-idinput, copied from existing workflows.@masterinstead of a SHA, which code scanning flags.AGENTS.mdhad no guidance on workflows, and its "reuse existing repository patterns" rule pointed agents straight at the deprecated input:npm-publish.ymlandtrigger-licensed-release.ymlstill useapp-id.The same guidance goes to IgniteUI/igniteui-actions in its own
AGENTS.md, together with the pin andclient-idfixes there.Backports: 22.2.x #17897, 22.1.x #17898, 22.0.x #17899.
Type of Change (check all that apply):
Component(s) / Area(s) Affected:
AGENTS.md (CI workflows)
How Has This Been Tested?
Documentation only.
Checklist:
feature/README.MDupdates for the feature docsREADME.MDCHANGELOG.MDupdates for newly added functionalityng updatemigrations for the breaking changes (migrations guidelines)🤖 Generated with Claude Code