Jay Huh cf22ee8f5b Harden RocksDB PR comment artifact downloads (#14941) ...

Summary:
Pull Request resolved: https://github.com/facebook/rocksdb/pull/14941

Download GitHub Actions artifacts into `_artifact` before reading comment result files so untrusted artifacts cannot overwrite checked-out workflow helper scripts. Keep `post-pr-comment.js` loaded only from `.github/scripts` and remove unnecessary inherited secrets from the review-comment wrapper workflows.

Reviewed By: pdillinger

Differential Revision: D112129548

fbshipit-source-id: c807eab2197018b0672a5e1d9710e4c6bfcfd0ac

2026-07-15 12:54:46 -07:00

..

ai-review-analysis.yml

Fix broken github codex review (#14923)

2026-07-09 09:55:44 -07:00

ai-review-comment.yml

Harden RocksDB PR comment artifact downloads (#14941)

2026-07-15 12:54:46 -07:00

benchmark-linux.yml

Scope down workflow permissions (#12973)

2024-08-26 15:28:17 -07:00

clang-tidy-comment.yml

Harden RocksDB PR comment artifact downloads (#14941)

2026-07-15 12:54:46 -07:00

clang-tidy.yml

Upgrade CI Docker images: clang-18→clang-21, ubuntu24 24.0→24.1 (#14576)

2026-04-06 15:00:53 -07:00

claude-review-comment.yml

Harden RocksDB PR comment artifact downloads (#14941)

2026-07-15 12:54:46 -07:00

claude-review.yml

Cap Claude thinking budget (#14731)

2026-05-11 17:45:43 -07:00

codex-review-comment.yml

Harden RocksDB PR comment artifact downloads (#14941)

2026-07-15 12:54:46 -07:00

codex-review.yml

Disable codex reviews on PRs (#14933)

2026-07-13 15:10:40 -07:00

nightly-candidate.yml

Scope down workflow permissions (#12973)

2024-08-26 15:28:17 -07:00

nightly.yml

Fix CI: detect Windows MSVC toolchain (#14869)

2026-06-22 09:22:13 -07:00

pr-jobs-candidate.yml

Scope down workflow permissions (#12973)

2024-08-26 15:28:17 -07:00

pr-jobs.yml

Macos CI fix for jdk dependency issue (#14885)

2026-06-25 08:38:32 -07:00

weekly.yml

CI: move valgrind to weekly (#14110)

2025-11-07 10:36:34 -08:00