feat: enable GitHub App authentication for review workflows #7382

bdougie · 2025-08-25T02:50:02Z

Description

This PR enables GitHub App authentication for the Continue review workflows, building on the groundwork from #7228. Reviews will now be posted as continue-agent[bot] instead of github-actions[bot].

Context

This is a focused follow-up to #7228, keeping the implementation simple for a quick review. Rather than modifying the action files themselves, we're generating the GitHub App token directly in the workflows and passing it via the GITHUB_TOKEN environment variable.

Changes

Generate GitHub App token using actions/create-github-app-token@v1 in both review workflows
Pass the generated token to action steps via GITHUB_TOKEN environment variable
Uses existing CONTINUE_APP_ID (variable) and CONTINUE_APP_PRIVATE_KEY (secret)

Benefits

✅ Branded Bot Identity: Reviews appear from continue-agent[bot]
✅ Better Rate Limits: GitHub Apps have higher API rate limits
✅ Simple Implementation: Minimal changes, focused scope
✅ No Action Modifications: Works with existing action code

Testing

I've been testing this on my personal repo, also note the continue-agent is under my personal org. I can transfer once approved and merged.

bdougie/contributor.info#517 (comment)

Summary by cubic

Enable GitHub App authentication for the Continue review workflows so reviews post as continue-agent[bot] and benefit from higher API rate limits.

New Features
- Generate app token in both review workflows using actions/create-github-app-token@v2.
- Pass the token via GITHUB_TOKEN to the action steps; reuse CONTINUE_APP_ID and CONTINUE_APP_PRIVATE_KEY.

github-actions · 2025-08-25T02:59:33Z

AI Code Review

AI review completed but failed to parse output

No specific line comments generated.

💡 To request a new detailed review, comment @continue-detailed-review

github-actions · 2025-08-25T02:59:36Z

⚠️ AI review completed but no review output was generated. Check the action logs for details.

💡 To request a new review, comment @continue-general-review

bdougie · 2025-08-25T04:06:20Z

.github/workflows/continue-detailed-review.yaml

    steps:
+      - name: Generate GitHub App Token
+        id: app-token
+        uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v2.0.0


This latest v2 provides short live tokens (expire within an hour of the action run).

Enable Continue Agent bot identity for PR reviews by generating GitHub App tokens in workflows. Reviews will now appear as continue-agent[bot] instead of github-actions[bot] for better branding and improved rate limits. - Generate app token using actions/create-github-app-token@v1 - Pass token via GITHUB_TOKEN env var to action steps - Uses existing CONTINUE_APP_ID and CONTINUE_APP_PRIVATE_KEY secrets

github-actions · 2025-08-25T15:35:21Z

AI Code Review

AI review completed but failed to parse output

No specific line comments generated.

💡 To request a new detailed review, comment @continue-detailed-review

github-actions · 2025-08-25T15:35:24Z

⚠️ AI review completed but no review output was generated. Check the action logs for details.

💡 To request a new review, comment @continue-general-review

github-actions · 2025-08-25T15:49:04Z

AI Code Review

AI review completed but failed to parse output

No specific line comments generated.

💡 To request a new detailed review, comment @continue-detailed-review

github-actions · 2025-08-25T15:49:04Z

⚠️ AI review completed but no review output was generated. Check the action logs for details.

💡 To request a new review, comment @continue-general-review

github-actions · 2025-08-25T16:08:49Z

AI Code Review

AI review completed but failed to parse output

No specific line comments generated.

💡 To request a new detailed review, comment @continue-detailed-review

github-actions · 2025-08-25T16:09:02Z

⚠️ AI review completed but no review output was generated. Check the action logs for details.

💡 To request a new review, comment @continue-general-review

continue-agent · 2025-08-25T16:21:00Z

AI Code Review

AI review completed but failed to parse output

No specific line comments generated.

💡 To request a new detailed review, comment @continue-detailed-review

continue-agent · 2025-08-25T16:21:06Z

⚠️ AI review completed but no review output was generated. Check the action logs for details.

💡 To request a new review, comment @continue-general-review

bdougie · 2025-08-25T16:33:38Z

@tomasz-stefaniak The continue-agent isn't commenting with the GitHub App token yet because the workflows are pinned to an old commit (64bda6b).

I did pin it to this branch to get the comment to show, and have now reverted the pin. After this PR is merged, the workflow files will need to be updated to reference the new commit SHA to enable the GitHub App authentication for comments.

#7382 (comment)

tomasz-stefaniak · 2025-08-25T19:49:28Z

@tomasz-stefaniak The continue-agent isn't commenting with the GitHub App token yet because the workflows are pinned to an old commit (64bda6b).

I did pin it to this branch to get the comment to show, and have now reverted the pin. After this PR is merged, the workflow files will need to be updated to reference the new commit SHA to enable the GitHub App authentication for comments.

#7382 (comment)

You can make this SHA change on this branch - the commit SHA doesn't need to be on main for this to work, and we don't squash before merging. For example, you can use the SHA of "revert: revert the commit pinning to this branch" - 0747efa57100507e9565d5863a172dcb0e05175c

Update both review workflows to use commit SHA 0747efa instead of branch reference to enable continue-agent bot authentication

bdougie · 2025-08-25T21:58:19Z

@tomasz-stefaniak updated the sha

bdougie · 2025-09-09T13:56:04Z

Main is merged

bdougie · 2025-09-11T21:32:14Z

Closing in favor to the changes @sestinj has in progress.

github-project-automation bot added this to Issues and PRs Aug 25, 2025

github-project-automation bot moved this to Todo in Issues and PRs Aug 25, 2025

bdougie force-pushed the bdougie/use-continue-agent branch from 30c0082 to 698652e Compare August 25, 2025 02:54

bdougie marked this pull request as ready for review August 25, 2025 02:58

bdougie requested a review from a team as a code owner August 25, 2025 02:58

bdougie requested review from tomasz-stefaniak and removed request for a team August 25, 2025 02:58

dosubot bot added the size:S This PR changes 10-29 lines, ignoring generated files. label Aug 25, 2025

bdougie force-pushed the bdougie/use-continue-agent branch from 698652e to dac1a4f Compare August 25, 2025 04:03

bdougie commented Aug 25, 2025

View reviewed changes

bdougie force-pushed the bdougie/use-continue-agent branch from dac1a4f to 8bc0de8 Compare August 25, 2025 04:11

dosubot bot added size:M This PR changes 30-99 lines, ignoring generated files. and removed size:S This PR changes 10-29 lines, ignoring generated files. labels Aug 25, 2025

bdougie force-pushed the bdougie/use-continue-agent branch from 8bc0de8 to 6cad07a Compare August 25, 2025 04:17

dosubot bot added size:S This PR changes 10-29 lines, ignoring generated files. and removed size:M This PR changes 30-99 lines, ignoring generated files. labels Aug 25, 2025

bdougie force-pushed the bdougie/use-continue-agent branch from 6cad07a to 29bfc23 Compare August 25, 2025 05:07

tomasz-stefaniak marked this pull request as draft August 25, 2025 15:34

tomasz-stefaniak marked this pull request as ready for review August 25, 2025 15:34

bdougie marked this pull request as draft August 25, 2025 15:41

bdougie marked this pull request as ready for review August 25, 2025 15:48

fix: use app token

a889461

bdougie force-pushed the bdougie/use-continue-agent branch from cb88db4 to a889461 Compare August 25, 2025 16:01

dosubot bot added size:M This PR changes 30-99 lines, ignoring generated files. and removed size:S This PR changes 10-29 lines, ignoring generated files. labels Aug 25, 2025

bdougie marked this pull request as draft August 25, 2025 16:07

bdougie marked this pull request as ready for review August 25, 2025 16:07

bdougie marked this pull request as draft August 25, 2025 16:19

bdougie marked this pull request as ready for review August 25, 2025 16:20

revert: revert the commit pinning to this branch

0747efa

bdougie force-pushed the bdougie/use-continue-agent branch from fc73a20 to 0747efa Compare August 25, 2025 16:22

fix: pin workflow actions to commit SHA for GitHub App authentication

b05843b

Update both review workflows to use commit SHA 0747efa instead of branch reference to enable continue-agent bot authentication

Merge branch 'main' into bdougie/use-continue-agent

8c5a1b6

Merge branch 'main' into bdougie/use-continue-agent

ae56c4c

bdougie closed this Sep 11, 2025

github-project-automation bot moved this from Todo to Done in Issues and PRs Sep 11, 2025

github-actions bot locked and limited conversation to collaborators Sep 11, 2025

github-actions bot deleted the bdougie/use-continue-agent branch November 11, 2025 06:03

feat: enable GitHub App authentication for review workflows #7382

feat: enable GitHub App authentication for review workflows #7382

Uh oh!

Conversation

bdougie commented Aug 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Context

Changes

Benefits

Testing

Related

Summary by cubic

Uh oh!

github-actions bot commented Aug 25, 2025

AI Code Review

Uh oh!

github-actions bot commented Aug 25, 2025

Uh oh!

bdougie Aug 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Aug 25, 2025

AI Code Review

Uh oh!

github-actions bot commented Aug 25, 2025

Uh oh!

github-actions bot commented Aug 25, 2025

AI Code Review

Uh oh!

github-actions bot commented Aug 25, 2025

Uh oh!

github-actions bot commented Aug 25, 2025

AI Code Review

Uh oh!

github-actions bot commented Aug 25, 2025

Uh oh!

continue-agent bot commented Aug 25, 2025

AI Code Review

Uh oh!

continue-agent bot commented Aug 25, 2025

Uh oh!

bdougie commented Aug 25, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

tomasz-stefaniak commented Aug 25, 2025

Uh oh!

bdougie commented Aug 25, 2025

Uh oh!

bdougie commented Sep 9, 2025

Uh oh!

bdougie commented Sep 11, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

bdougie commented Aug 25, 2025 •

edited

Loading

bdougie Aug 25, 2025 •

edited

Loading

bdougie commented Aug 25, 2025 •

edited

Loading