feat: enable Codex PR reviews

[robbycochran]

Summary

• pin the repository caller to the merged composable task workflow
• select Codex with the openai-inference provider
• declare the github-review and openai-inference provider contract
• add test coverage for the caller inputs

Validation

• actionlint
• bash -n
• go test ./test -run TestGitHubAppTokenIsHostOnly

The new reusable workflow will be exercised by the first PR opened after this caller change merges; pull_request_target uses the base branch caller for this PR.

Summary by CodeRabbit

• Chores
  • Updated the automated pull request review workflow to use the latest Codex review configuration.
  • Configured OpenAI inference, the specified review model, workspace, and required providers.
• Tests
  • Expanded workflow validation to confirm the required Codex review settings are explicitly configured.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: stackrox/harness-openshell/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 7e5bb51c-f803-4cbe-b81a-126cad330525

📥 Commits

Reviewing files that changed from the base of the PR and between 709f4cc and 7eb6e54.

📒 Files selected for processing (2)

• .github/workflows/ai-review.yml
• test/pr_review_test.go

Included review availability: Your plan provides up to 12 included reviews per hour; 8 remain after this review.

---

Walkthrough

The reusable AI review workflow now uses the updated Codex review configuration. Tests verify the configured agent, provider, model, workspace, and required providers.

Changes

Codex review configuration

Layer / File(s)	Summary
Configure and verify Codex review .github/workflows/ai-review.yml, test/pr_review_test.go	The workflow updates its Harness reference and configures Codex with OpenAI inference, gpt-5.6-luna, the codex-review workspace, and the github-review and openai-inference providers. Tests assert these settings.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Feature

Merge Risk: ⚪ Minimal · up to 7eb6e

The workflow configuration and corresponding caller-input tests are aligned; the change is mergeable with normal checks.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 1 functions across 1 files. (1 skipped: 1 …	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: enabling Codex-based pull request reviews.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 1 functions across 1 files. (1 skipped: 1 unsupported.)

• Fix all pre-merge checks with AI

✨ Finishing Touches 💡 1

📝 Generate docstrings 💡

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}

[stackrox-openshell-workflow]

The model name gpt-5.6-luna appears to be a placeholder or a non-existent model. Please confirm and update it to a valid model name.

[stackrox-openshell-workflow]

The model name gpt-5.6-luna appears to be a placeholder or a non-existent model. Please confirm and update it to a valid model name.