Skip to content

[code-infra] Benchmark GHA revisited#21349

Open
Janpot wants to merge 143 commits intomui:masterfrom
Janpot:hackathon/gh-action-security-fix
Open

[code-infra] Benchmark GHA revisited#21349
Janpot wants to merge 143 commits intomui:masterfrom
Janpot:hackathon/gh-action-security-fix

Conversation

@Janpot
Copy link
Member

@Janpot Janpot commented Feb 16, 2026

On top of #21222, which had some problems

Use pull_request + workflow_run two-workflow pattern instead of
pull_request_target which grants base-repo privileges to untrusted
PR code. Split into three workflows:

  • benchmark-baseline.yml: push to master only, stores results in data repo
  • benchmark-pr.yml: pull_request trigger (safe for forks, no secrets)
  • benchmark-comparison.yml: workflow_run trigger, downloads artifact and
    posts PR comment using trusted code from default branch

Tests reworked to use vitest browser mode and reuse the page. I didn't touch the benchmark code itself. Leaving that up to the teams as an exercise

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 31 out of 32 changed files in this pull request and generated 10 comments.

Files not reviewed (1)
  • pnpm-lock.yaml: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Janpot and others added 13 commits February 23, 2026 17:05
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Jan Potoms <2109932+Janpot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Jan Potoms <2109932+Janpot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Jan Potoms <2109932+Janpot@users.noreply.github.com>
@github-actions github-actions bot added the PR: out-of-date The pull request has merge conflicts and can't be merged. label Mar 12, 2026
@github-actions
Copy link
Contributor

This pull request has conflicts, please resolve those before we can evaluate the pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

PR: out-of-date The pull request has merge conflicts and can't be merged. scope: code-infra Involves the code-infra product (https://www.notion.so/mui-org/5562c14178aa42af97bc1fa5114000cd). type: new feature Expand the scope of the product to solve a new problem.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants