Skip to content

meta: add AgentScan workflow - #63364

Open
mcollina wants to merge 2 commits into
nodejs:mainfrom
mcollina:chore/add-agentscan-workflow
Open

meta: add AgentScan workflow#63364
mcollina wants to merge 2 commits into
nodejs:mainfrom
mcollina:chore/add-agentscan-workflow

Conversation

@mcollina

@mcollina mcollina commented May 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

This adds a minimal AgentScan workflow for newly opened pull requests.

Why this is useful

We occasionally get pull requests opened by bot-like or mass-automation accounts. Running AgentScan on new PRs gives maintainers an extra triage signal without changing the normal review flow.

Scope

This change intentionally just uses MatteoGabriele/agentscan-action, pinned to a full commit SHA, with comments disabled.

It does not add any extra workflow logic for:

  • issue scanning
  • comment scanning
  • label creation

Labels

The action may apply these labels when it flags an account:

  • agentscan:community-flagged
  • agentscan:mixed-signals
  • agentscan:automated-account

Those labels are not created by this PR and would need to be added separately if we want flagged PRs to be labeled successfully.

@nodejs-github-bot

nodejs-github-bot commented May 16, 2026

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/actions

@nodejs-github-bot nodejs-github-bot added the meta Issues and PRs related to the general management of the project. label May 16, 2026
@mcollina
mcollina marked this pull request as draft May 16, 2026 10:10
@mcollina
meta: add AgentScan workflow
7bb5c6e 
Signed-off-by: Matteo Collina <matteo.collina@gmail.com>
Signed-off-by: Matteo Collina <hello@matteocollina.com>
@mcollina
mcollina force-pushed the chore/add-agentscan-workflow branch from 222b9b7 to 7bb5c6e Compare May 16, 2026 10:13
@nicolo-ribaudo nicolo-ribaudo mentioned this pull request Jun 12, 2026
Merged
@github-actions

github-actions Bot commented Aug 15, 2026

Copy link
Copy Markdown
Contributor

This pull request has been marked as stale due to 90 days of inactivity.
It will be automatically closed in 30 days if no further activity occurs. If this is still relevant, please leave a comment or update it to keep it open.

@github-actions github-actions Bot added the stale Issues and PRs marked stale due to inactivity and scheduled for automatic closure. label Aug 15, 2026
@MatteoGabriele

MatteoGabriele commented Aug 15, 2026

Copy link
Copy Markdown

This PR has been marked as stale, so please let me know if I can help in any way.
Since the initial draft, several updates have been made, including the option to run it with labels only or to use a honeypot comment to verify that the user is human.

In case this was meant to be auto-closed later on, disregard my comment.

@github-actions github-actions Bot removed the stale Issues and PRs marked stale due to inactivity and scheduled for automatic closure. label Aug 16, 2026
@mcollina
mcollina marked this pull request as ready for review September 2, 2026 13:20
@aduh95

aduh95 commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

I would set trusted-author-associations (see https://github.com/MatteoGabriele/agentscan-action#inputs)

@mcollina
meta: skip AgentScan for trusted author associations
c75e597 
Bump agentscan-action to v2.5.0 so that trusted-author-associations is
available, and skip scanning members, owners and collaborators. The v1
agent-scan-comment input is replaced by mode: labels.

Signed-off-by: Matteo Collina <hello@matteocollina.com>
@panva

panva commented Sep 18, 2026

Copy link
Copy Markdown
Member

I believe this is superseded by https://github.com/nodejs/node/actions/workflows/contributor-guidance.yml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

meta Issues and PRs related to the general management of the project.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@mcollina @nodejs-github-bot @MatteoGabriele @aduh95 @panva