Repository navigation
chore: add Wiz sensor step to GitHub Actions jobs (INFRA-4215) - #405
Merged
Merged
Conversation
Adds a gated, fail-open Wiz runner sensor step as the first step of Linux GitHub-hosted jobs. It is a no-op until WIZ_SENSOR_ENABLED is true. INFRA-4215 Co-Authored-By: Claude <noreply@anthropic.com>
Pin to the merge commit of Web3Auth/.github#5. INFRA-4215 Co-Authored-By: Claude <noreply@anthropic.com>
javiergarciavera
marked this pull request as ready for review
October 21, 2026 15:39
Empty commit to trigger workflows. INFRA-4215 Co-Authored-By: Claude <noreply@anthropic.com>
chaitanyapotti
approved these changes
Oct 27, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Motivation and Context
Run the Wiz runner sensor on Linux GitHub-hosted runners across the Web3Auth org, controlled by one org-level switch (INFRA-4215).
Jira Link: https://consensyssoftware.atlassian.net/browse/INFRA-4215
Description
Adds a
Wiz sensorstep as the first step of each job that runs on a Linux GitHub-hosted runner. The step calls the composite action inWeb3Auth/.github(PR #5).WIZ_SENSOR_ENABLEDistrueand the org secretWIZ_SENSOR_TOKENis set. Until then every job logsSkipped because WIZ_SENSOR_ENABLED is not true.and runs as before.WIZ_SENSOR_ENABLEDtofalsedisables it everywhere with no workflow change.pull_request_targetworkflows are not touched.Draft until PR #5 is merged. The action is pinned to the commit on the PR #5 branch. Before this PR is marked ready, the pin is updated to the merge commit of PR #5.
How has this been tested?
YAML parses for every changed file, the diff is additions only, and the sensor is the first step of every changed job. The step is a no-op while
WIZ_SENSOR_ENABLEDis unset, so CI should pass unchanged. Not yet run with the sensor enabled; that happens in the Phase 3 pilot.Types of changes
Note
Low Risk
Additive, org-gated CI step on Linux runners with fail-open behavior; does not alter application or auth logic.
Overview
Adds a Wiz sensor step as the first step in the
testjob onubuntu-latest, calling the pinned composite actionWeb3Auth/.github/.github/actions/wiz-sensor@v1.0.0.The step is controlled by org variable
WIZ_SENSOR_ENABLEDand secretWIZ_SENSOR_TOKEN; when disabled or unset, CI should behave as before. No changes to checkout, Node setup, or existing build/test/deploy steps.Reviewed by Cursor Bugbot for commit 27963d1. Bugbot is set up for automated code reviews on this repo. Configure here.