Lukasz Lenart a1193445bf chore(copilot): add code-review agent skill (#1876) ...

GitHub Copilot code review reads agent skills from .github/skills, but
this repository had none, so its pull request reviews ran without any of
the project's conventions: the JUnit 4 only rule, the WW-XXXX title
format, and the framework's security-sensitive patterns.

Add .github/skills/code-review/SKILL.md covering test conventions and the
three vacuous-test traps, security-sensitive code paths, PR and commit
hygiene, and Struts implementation patterns.

The security section deliberately constrains what the reviewer may write:
a pull request is public, so a comment naming a weakness or its impact
would itself be a disclosure. It asks only for a neutral pointer to
SECURITY.md and the private process.

2026-08-27 14:35:42 +02:00

..

skills/code-review

chore(copilot): add code-review agent skill (#1876)

2026-08-27 14:35:42 +02:00

workflows

build(deps): bump github/codeql-action from 4.37.6 to 4.37.7 (#1856)

2026-08-23 19:16:19 +02:00

dependabot.yml

ci(dependabot): fix cooldown property name (#1702)

2026-05-20 07:07:05 +00:00