argot-setup-ci

argot-setup-ci

Add argot to a repository's CI as a non-blocking pattern check on every pull request. Never make it block the merge unless the user explicitly asks for a gate. This is user-wired automation: the Action runs only at the GitHub event in the workflow the repository commits; it does not install or claim an agent end-of-turn or acceptance lifecycle.

The Action installs Argot but never fits in CI. CI and local setup are one decision: a committed argot.toml plus a complete committed .argot/ fit snapshot already on the PR base/default branch — the excludes and learned detector data that keep every check reproducible. A repository without that snapshot must run the full argot-setup flow first. The excludes that keep vendored, generated and demo trees out of the voice — makes the CI voice sharper, and argot is only as good as that scoping. If the repository has no argot.toml yet, offer the full argot-setup flow first, which covers CI as one of its phases. Come here when the user wants CI specifically, or already has a configured repo.

Steps

1. Confirm the repo is on GitHub. (Forks: enable Actions in Settings first.)

2. Check the bootstrap boundary before writing a workflow. On the branch that future pull requests will target (normally the default branch), argot status --format json must show snapshot.complete: true and snapshot.committed: true. Verify the tracked artifact is available from that branch, for example:

   git show HEAD:.argot/scorer-config.json > /dev/null
   

   A snapshot committed only in the PR adding the workflow does not satisfy this: the Action reads the PR base so a change cannot certify itself. If it is absent, finish, review, commit, and merge the baseline first; add CI in a follow-up PR or commit. Do not use CI fitting as a workaround.

3. Write .github/workflows/argot.yml:

   name: argot
   on:
     pull_request:
     push:
       branches: [main]
   
   permissions:
     contents: read
     pull-requests: write     # the sticky score comment
     security-events: write   # SARIF code-scanning annotations
   
   jobs:
     voice:
       runs-on: ubuntu-latest
       steps:
         - uses: actions/checkout@v4
           with:
             fetch-depth: 0    # Action reads the committed snapshot from the PR base
         - uses: get-tmonier/argot@main