Skip to content

meta: add AgentScan workflow - #63364

Open
mcollina wants to merge 1 commit into
nodejs:mainfrom
mcollina:chore/add-agentscan-workflow
Open

meta: add AgentScan workflow#63364
mcollina wants to merge 1 commit into
nodejs:mainfrom
mcollina:chore/add-agentscan-workflow

Conversation

@mcollina

@mcollina mcollina commented May 16, 2026

Copy link
Copy Markdown
Member

This adds a minimal AgentScan workflow for newly opened pull requests.

Why this is useful

We occasionally get pull requests opened by bot-like or mass-automation accounts. Running AgentScan on new PRs gives maintainers an extra triage signal without changing the normal review flow.

Scope

This change intentionally just uses MatteoGabriele/agentscan-action, pinned to a full commit SHA, with comments disabled.

It does not add any extra workflow logic for:

  • issue scanning
  • comment scanning
  • label creation

Labels

The action may apply these labels when it flags an account:

  • agentscan:community-flagged
  • agentscan:mixed-signals
  • agentscan:automated-account

Those labels are not created by this PR and would need to be added separately if we want flagged PRs to be labeled successfully.

@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/actions

@nodejs-github-bot nodejs-github-bot added the meta Issues and PRs related to the general management of the project. label May 16, 2026
@mcollina
mcollina marked this pull request as draft May 16, 2026 10:10
Signed-off-by: Matteo Collina <matteo.collina@gmail.com>
Signed-off-by: Matteo Collina <hello@matteocollina.com>
@mcollina
mcollina force-pushed the chore/add-agentscan-workflow branch from 222b9b7 to 7bb5c6e Compare May 16, 2026 10:13
@github-actions

Copy link
Copy Markdown
Contributor

This pull request has been marked as stale due to 90 days of inactivity.
It will be automatically closed in 30 days if no further activity occurs. If this is still relevant, please leave a comment or update it to keep it open.

@github-actions github-actions Bot added the stale Issues and PRs marked stale due to inactivity and scheduled for automatic closure. label Aug 15, 2026
@MatteoGabriele

Copy link
Copy Markdown

This PR has been marked as stale, so please let me know if I can help in any way.
Since the initial draft, several updates have been made, including the option to run it with labels only or to use a honeypot comment to verify that the user is human.

In case this was meant to be auto-closed later on, disregard my comment.

@github-actions github-actions Bot removed the stale Issues and PRs marked stale due to inactivity and scheduled for automatic closure. label Aug 16, 2026
@mcollina
mcollina marked this pull request as ready for review September 2, 2026 13:20
@aduh95

aduh95 commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

I would set trusted-author-associations (see https://github.com/MatteoGabriele/agentscan-action#inputs)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

meta Issues and PRs related to the general management of the project.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants