Skip to content

ci: replace local plugin validation with reusable gh-actions workflow - #179

Open
withinfocus wants to merge 4 commits into
mainfrom
ci/use-reusable-validate-ai-workflow
Open

ci: replace local plugin validation with reusable gh-actions workflow#179
withinfocus wants to merge 4 commits into
mainfrom
ci/use-reusable-validate-ai-workflow

Conversation

@withinfocus

Copy link
Copy Markdown
Contributor

🎟️ Tracking

No Jira ticket. This is the ai-plugins side of bitwarden/gh-actions#856, which moved the Claude-material validation workflow and its scripts into gh-actions as their only home.

📔 Objective

Now that gh-actions owns the validation workflow, this repo no longer needs its own copy. Remove the local copies and call the reusable workflow instead.

  • Delete .github/workflows/validate-plugins.yml and the whole scripts/ directory (bump-plugin-version, validate-marketplace, validate-plugin-structure, validate-version-bump, lib/path-sanitization).
  • Add .github/workflows/validate-ai.yml, a thin caller of bitwarden/gh-actions/.github/workflows/_validate-ai.yml@main, following the same shape as the existing review-code.yml.
  • Point CLAUDE.md, CONTRIBUTING.md, and README.md at the scripts' new location and note that structure, marketplace, and version-bump validation now run in CI.

Note for reviewers

If validate-plugins.yml's job was a required status check on main, branch protection needs updating to the new check name (Validate AI / Validate) — the old check name will no longer report.

bitwarden/gh-actions#856 lifted the Claude-material validation workflow and
its scripts out of this repo and made gh-actions their only home. Remove the
local copies and call the reusable workflow instead.

- Delete .github/workflows/validate-plugins.yml and the entire scripts/
  directory (bump-plugin-version, validate-marketplace,
  validate-plugin-structure, validate-version-bump, lib/path-sanitization).
- Add .github/workflows/validate-ai.yml, a thin caller of
  bitwarden/gh-actions/.github/workflows/_validate-ai.yml, mirroring the
  existing review-code.yml pattern.
- Update CLAUDE.md, CONTRIBUTING.md, and README.md to point contributors at
  the scripts' new home in gh-actions and note validation now runs in CI.
@withinfocus withinfocus added the ai-review Request a Claude code review label Jul 31, 2026
@github-actions

github-actions Bot commented Jul 31, 2026

Copy link
Copy Markdown

Claude Code is reviewing the changed Claude configuration...

If this comment does not update with results, check the Actions log.

@github-actions

github-actions Bot commented Jul 31, 2026

Copy link
Copy Markdown

🤖 Bitwarden Claude Code Review

Overall Assessment: APPROVE

This PR removes the repo-local scripts/ directory and validate-plugins.yml, replacing them with validate-ai.yml — a thin caller of bitwarden/gh-actions/.github/workflows/_validate-ai.yml@main that mirrors the shape, top-level permissions: {}, and job-scoped permissions of the existing review-code.yml. I re-verified the current head: no file in the tree still references the deleted scripts (.claude/CLAUDE.md, both CONTRIBUTING.md files, README.md, package.json, .cspell.json, .prettierignore, CODEOWNERS, and .claude/settings.json are all clean), and the documented replacement paths now resolve to validate-ai/scripts/ in gh-actions. The bitwarden-init 1.2.1 bump is consistent across plugin.json, marketplace.json, the README catalog table, and CHANGELOG.md, and the plugin has no agent frontmatter to update.

Secrets are passed through Actions expressions with no hardcoded credentials, the trigger is pull_request rather than pull_request_target, and the new Validate / Validate check is passing. Both earlier documentation findings are resolved, and the required-status-check naming question was settled by the author's note that branch protection will be re-pointed after this lands. No new findings.

@withinfocus

Copy link
Copy Markdown
Contributor Author

I've deleted the branch protection requirement around AI validation. Once this lands I can set the new path up for this workflow.

Comment thread .claude/CLAUDE.md Outdated
The plugin's CONTRIBUTING.md still referenced the repository-root
./scripts/bump-plugin-version.sh, which this branch deletes. Point it at the
helper's new home in bitwarden/gh-actions, matching the root docs.

Bump bitwarden-init to 1.2.1 (PATCH) with a changelog entry per the repo's
version-bump rule for plugin doc changes.
The 1.2.1 bump missed the README catalog row, which validate-marketplace
cross-checks against marketplace.json. Bump it to match.
Comment thread CONTRIBUTING.md Outdated
Fix the bump-plugin-version.sh command path to be runnable from a gh-actions
checkout, and list the README plugin catalog among the files a bump touches
(across both CONTRIBUTING files and CLAUDE.md).
@withinfocus
withinfocus marked this pull request as ready for review July 31, 2026 20:31
@withinfocus
withinfocus requested a review from a team as a code owner July 31, 2026 20:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ai-review Request a Claude code review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant