Consolidate security-guard into bot-detection workflow#15053
Conversation
…ecurity-guard Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
There was a problem hiding this comment.
Pull request overview
This PR consolidates agentic workflow guidance by removing the dedicated security-guard workflow and aligning bot-detection with the shared “mood” guidance that’s used across many other workflows.
Changes:
- Deleted
.github/workflows/security-guard.mdand its compiled.github/workflows/security-guard.lock.yml. - Added
imports: - shared/mood.mdto.github/workflows/bot-detection.md. - Recompiled
.github/workflows/bot-detection.lock.ymlto include the resolved manifest and runtime import forshared/mood.md.
Reviewed changes
Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| .github/workflows/security-guard.md | Removed the security guard agent workflow definition. |
| .github/workflows/security-guard.lock.yml | Removed the compiled lock workflow for security guard. |
| .github/workflows/bot-detection.md | Added shared/mood.md import to align prompt guidance with other workflows. |
| .github/workflows/bot-detection.lock.yml | Updated compiled workflow to include resolved manifest + runtime import for shared/mood.md. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| imports: | ||
| - shared/mood.md |
There was a problem hiding this comment.
This PR deletes the security-guard workflow, but there are still repo docs/specs that reference security-guard.md / security-guard.lock.yml (e.g. specs/security-architecture-spec-validation.md). Please update or remove those references in the same PR to avoid stale/broken documentation after the workflow deletion.
| imports: | |
| - shared/mood.md |
Removes redundant
security-guardworkflow by merging its features intobot-detection.Changes
shared/mood.md(adds "focus on quality, security, documentation" guidance)security-guard.mdandsecurity-guard.lock.yml(1,294 lines removed)Both workflows had equivalent safe-outputs configuration (noop, messages) and decision frameworks. The only functional difference was the mood import.
The compiled lock file now includes the runtime-import directive before the main workflow content.
Original prompt
✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.