Milestones

List view

• codex-pivot

  Replace claude-code-action across all 5 workflows with OpenAI Codex (cross-model review, context-aware). Drivers: Anthropic OAuth deprecation, #271 quality-gate ceiling, cost, cross-model signal. Retire runtime/ tree.

  No due date

  •4/23 issues closed
  17% complete19 open 4 closed

• PR-review quality-gate hardening

  Hardening follow-ups for the claude-pr-review/quality-gate commit status feature shipped in #179. Tracks fail-open, regex validation, multi-bot comment collision, and longer-term structured-output contract.

  No due date

  •2/6 issues closed
  33% complete4 open 2 closed

• Containerized Claude Code CI runtime

  Epic: run Claude-powered CI jobs on GitHub-hosted runners inside a custom container image that pre-populates ~/.claude/ with the maintainer's skills, plugins, CLAUDE.md, and MCP configs. Goal: CI review/diagnose/apply-fix behavior matches local Claude Code, with no self-hosted infra and no expansion of security surface.

  No due date

  •25/32 issues closed
  78% complete7 open 25 closed

• v2.0.0

  Breaking release: require GitHub App tokens across all actions, remove deprecated gh_pat fallback, clean up v1 compatibility shims.

  No due date

  •7/7 issues closed
  100% complete0 open 7 closed

• Testable TypeScript Architecture

  Migrate all composite action logic from inline YAML bash blocks into TypeScript scripts with a full Jest test suite. Actions become thin wrappers invoking compiled Node.js bundles. Tests run locally on Windows and Linux without deploying to GitHub Actions.

  No due date

  •8/8 issues closed
  100% complete0 open 8 closed

• GitHub App Identity & Workflow Trigger

  Replace bot token usage with a GitHub App token so automated commits and comments appear under a distinct identity, and downstream workflows re-trigger correctly.

  No due date

  •3/3 issues closed
  100% complete0 open 3 closed

• Smarter PR Review Concurrency

  Add cancel-in-progress concurrency to pr-review and lint-fix, then implement a commit-status checkpoint so cancelled runs don't leave diff coverage gaps.

  No due date

  •2/2 issues closed
  100% complete0 open 2 closed

• v1.3.0 — Security & Architecture

  Fixes for blocking security vulnerabilities, broken event handling, and architecture gaps identified in adversarial review.

  No due date

  •9/9 issues closed
  100% complete0 open 9 closed