[bootc-bot]

Warning

Threat Detection Engine Failure — The analysis engine could not complete. This is a tooling failure, not a security finding.

What happened

The threat detection engine failed to produce results.

Review the workflow run logs for details.

Summary

Fixes the missing github-token error in actions/github-script for the rebase helper workflow.

This PR adds a new workflow file common/.github/workflows/rebase.yml that:

• Checks if pull requests need rebasing by examining the mergeable_state
• Automatically adds the needs-rebase label when a PR has merge conflicts
• Removes the label when conflicts are resolved
• Uses actions/github-script@v9 with the required github-token parameter

Validation

The workflow file follows the same pattern as other workflows in this repository (e.g., install-labels.yml) and includes:

• Proper github-token parameter set to ${{ secrets.GITHUB_TOKEN }}
• Appropriate permissions (contents: read, pull-requests: write)
• Triggers on PR events (opened, synchronize, reopened)

Once synced to other repositories via sync-common.yml, this will resolve the error reported in issue #61.

Resolves #61

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• api.anthropic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.anthropic.com"

See Network Configuration for more information.

Generated by Drafter for #61 · claude · sonnet45 · 87.1 AIC · ⊞ 4.5K · ◷

[bootc-bot]

Threat detection produced a warning for this pull request output.

These changes need to be scrutinized before merge and only merged after a careful manual review.

• Detection reason: agent_failure
• Review workflow run logs: https://github.com/bootc-dev/infra/actions/runs/39990171628