Skip to content

chore: add Context7 auto-refresh workflow [no-ci] #688

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lukeocodes merged 1 commit into from
Apr 11, 2026
+17 −0
Merged

chore: add Context7 auto-refresh workflow [no-ci] #688

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 17 additions & 0 deletions .github/workflows/context7.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
name: Update Context7 Documentation

on:
release:
types: [published]
workflow_dispatch:

jobs:
update-docs:
Copy link

Copilot AI Apr 11, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This workflow relies on the repository’s default GITHUB_TOKEN permissions. To ensure it behaves consistently across repos/orgs (and to follow least-privilege), add an explicit permissions: block at the workflow or job level (e.g., start with contents: read and only add additional scopes if upsert-context7 requires them).

Suggested change
update-docs:
update-docs:
permissions:
contents: read

Copilot uses AI. Check for mistakes.
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Update Context7 Documentation
id: context7
uses: rennf93/upsert-context7@1.1
Copy link

Copilot AI Apr 11, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The workflow uses a third-party action reference (rennf93/upsert-context7@1.1) that is not pinned to an immutable commit SHA. For supply-chain security and reproducibility, pin the action to a specific commit SHA (and optionally keep a major tag via Dependabot/action updates) so a retagged release can’t change what runs in this repository.

Suggested change
uses: rennf93/upsert-context7@1.1
# Pin to the exact commit for the intended 1.1 release.
uses: rennf93/upsert-context7@<FULL_40_CHAR_COMMIT_SHA_FOR_V1_1>

Copilot uses AI. Check for mistakes.
with:
operation: refresh
Loading