ci: remove Gemini issue triage (N-158)

[doublegate]

Why

Four workflow paths gave issue text from any GitHub user to the Gemini agent while it held repository credentials (app token, issues: write, id-token: write, GEMINI_API_KEY), with no check of the author's association. This is the published "PromptPwnd" pattern: a crafted issue can steer the agent into editing issues or leaking secrets. One of the scheduled triages also allowed run_shell_command(printenv) with the API keys in its environment.

Path	Trigger	Gate
gemini-issue-automated-triage.yml	every opened issue	none
gemini-issue-scheduled-triage.yml	schedule, all untriaged issues	none
gemini-scheduled-triage.yml	schedule/PR/push, all untriaged issues	none
gemini-dispatch.yml -> gemini-triage.yml	opened/reopened issue	none

Workflows triggered by issue events run from the default branch, so this goes to main now instead of waiting for v0.27. Tracked as N-158 in docs/audit/AUDIT-REEVALUATION-2026-10-07.md (on feat/v0.27).

Changes

• Delete the three triage workflows and gemini-triage.yml.
• gemini-dispatch.yml: drop the issues trigger, the triage branch of the if, the /triage command and the triage job.
• Unchanged: review and invoke, which only run for OWNER/MEMBER/COLLABORATOR comments or for non-fork PRs.

Checks

• gemini-dispatch.yml parses as YAML; no remaining references to the removed workflows.
• No kernel or build changes.

🤖 Generated with Claude Code

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: b6a6e598-53a0-4c93-be5d-63ea6aeb480e

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Antigravity review (Gemini via Ultra)

This trivial PR removes the automated and scheduled Gemini issue triage workflows to remediate audit finding N-158.

Blocking issues

None found.

Suggestions

• Update docs/audit/AUDIT-VERIFICATION-2026-10-05.md in this PR to mark finding N-158 as resolved, aligning with the project's documentation conventions.

Nitpicks

• .github/workflows/gemini-dispatch.yml (lines 52-53): The checks for github.event.issue.body and github.event.issue.author_association in the dispatch job's if condition are dead code now that the issues event trigger is removed. They can be deleted.

_{Automated first-pass review by agy on a self-hosted runner -- not a human review.}

Earlier review rounds (newest first)

Round reviewed at 2026-10-07 05:14 UTC

Antigravity review (Gemini via Ultra)

This PR removes the automated Gemini issue triage CI workflows to mitigate the risk of untrusted input reaching a privileged agent (audit N-158).

Blocking issues

None found.

Suggestions

• .github/workflows/gemini-dispatch.yml (around line 95): With the specific /triage check removed, an issue comment containing @gemini-cli /triage will now match the fallback request.startsWith("@gemini-cli") condition and trigger a standard invoke job with /triage as context. Consider explicitly catching and rejecting /triage (e.g., by setting the command to fallthrough or logging a warning) to prevent unintended agent invocations.

Nitpicks

None.

_{Automated first-pass review by agy on a self-hosted runner -- not a human review.}

[Copilot]

Copilot review overview

🟡 Changes recommended

The removed /triage command is inadvertently routed to the general Gemini invoke workflow.

Review effort: Balanced
Findings: 1

Open (1)

• Reject removed /triage command before generic invoke routing · New

What changed in this PR

Removes insecure Gemini issue-triage workflows and their dispatch integration.

Changes:

• Deletes four automated triage workflows.
• Removes issue triggers, triage routing, permissions, and job dependencies.
• Preserves trusted review and invoke paths.

File	Description
.github/​workflows/​gemini-triage.yml	Deletes reusable triage workflow.
.github/​workflows/​gemini-scheduled-triage.yml	Deletes scheduled bulk triage.
.github/​workflows/​gemini-issue-scheduled-triage.yml	Deletes credentialed scheduled triage.
.github/​workflows/​gemini-issue-automated-triage.yml	Deletes event-driven issue triage.
.github/​workflows/​gemini-dispatch.yml	Removes issue-triggered triage dispatch.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!