Merge pull request #12 from Asymptote-Labs/codex/github-app-preflight

Skip legacy action on github_app repos

Author: gensericghiro-al

dist/index.js

@@ -0,0 +1,38 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {
+  shouldSkipLegacyActionForIntegration,
+  RepositoryIntegrationModeResponse,
+} from './client';
+
+function createIntegrationModeResponse(
+  overrides: Partial<RepositoryIntegrationModeResponse> = {}
+): RepositoryIntegrationModeResponse {
+  return {
+    repository_id: 'repo_123',
+    found: true,
+    integration_mode: 'legacy_action',
+    ...overrides,
+  };
+}
+
+test('skips the legacy action only for found github_app repositories', () => {
+  assert.equal(
+    shouldSkipLegacyActionForIntegration(
+      createIntegrationModeResponse({ integration_mode: 'github_app' })
+    ),
+    true
+  );
+
+  assert.equal(
+    shouldSkipLegacyActionForIntegration(
+      createIntegrationModeResponse({ found: false, integration_mode: 'github_app' })
+    ),
+    false
+  );
+
+  assert.equal(
+    shouldSkipLegacyActionForIntegration(createIntegrationModeResponse()),
+    false
+  );
+});

src/api/client.test.ts

@@ -17,6 +17,18 @@ interface ClientOptions {
   baseUrl: string;
 }
 
+export interface RepositoryIntegrationModeResponse {
+  repository_id: string | null;
+  found: boolean;
+  integration_mode: 'legacy_action' | 'github_app';
+}
+
+export function shouldSkipLegacyActionForIntegration(
+  integration: RepositoryIntegrationModeResponse
+): boolean {
+  return integration.found && integration.integration_mode === 'github_app';
+}
+
 export class AsymptoteClient {
   private apiKey: string;
   private baseUrl: string;
@@ -146,6 +158,17 @@ export class AsymptoteClient {
     }
   }
 
+  async getRepositoryIntegrationMode(
+    owner: string,
+    name: string
+  ): Promise<RepositoryIntegrationModeResponse> {
+    const params = new URLSearchParams({ owner, name });
+    return this.request<RepositoryIntegrationModeResponse>(
+      'GET',
+      `/api/repository-integration-mode?${params.toString()}`
+    );
+  }
+
   private sleep(ms: number): Promise<void> {
     return new Promise((resolve) => setTimeout(resolve, ms));
   }

src/api/client.ts

@@ -1,7 +1,12 @@
 import * as core from '@actions/core';
 import * as github from '@actions/github';
 import { getConfig } from './config';
-import { AsymptoteClient, RateLimitError, TimeoutError } from './api/client';
+import {
+  AsymptoteClient,
+  RateLimitError,
+  shouldSkipLegacyActionForIntegration,
+  TimeoutError,
+} from './api/client';
 import { getPRDiff, getIncrementalDiff } from './github/diff';
 import { postViolationComments, resolveOutdatedThreads } from './github.qkg1.topments';
 import { createCheckRun } from './github/checks';
@@ -16,6 +21,11 @@ async function run(): Promise<void> {
     core.info('Asymptote Security Scan starting...');
     core.debug(`API URL: ${config.apiUrl}`);
 
+    const client = new AsymptoteClient({
+      apiKey: config.apiKey,
+      baseUrl: config.apiUrl,
+    });
+
     // 2. Verify PR context
     if (github.context.eventName !== 'pull_request') {
       core.setFailed(
@@ -34,6 +44,28 @@ async function run(): Promise<void> {
     }
     const octokit = github.getOctokit(githubToken);
 
+    try {
+      const integration = await client.getRepositoryIntegrationMode(
+        github.context.repo.owner,
+        github.context.repo.repo
+      );
+      if (shouldSkipLegacyActionForIntegration(integration)) {
+        core.info(
+          'Repository is configured for GitHub App PR reviews; exiting legacy action without posting comments or checks.'
+        );
+        core.setOutput('decision', 'allow');
+        core.setOutput('total_violations', 0);
+        core.setOutput('critical_count', 0);
+        core.setOutput('high_count', 0);
+        core.setOutput('medium_count', 0);
+        return;
+      }
+    } catch (error) {
+      core.warning(
+        `Failed to look up repository integration mode; continuing with legacy action path. ${error instanceof Error ? error.message : String(error)}`
+      );
+    }
+
     // 4. Get PR diff (incremental on synchronize, full otherwise)
     const action = github.context.payload.action;
     const before = github.context.payload.before;
@@ -140,10 +172,6 @@ async function run(): Promise<void> {
 
     // 5. Call Asymptote API
     core.info('Submitting diff for evaluation...');
-    const client = new AsymptoteClient({
-      apiKey: config.apiKey,
-      baseUrl: config.apiUrl,
-    });
 
     let result;
     try {