CEF GitHub Tracker Action

Reusable GitHub Action that sends PR, review, and push events to the CEF Vault GitHub agent.

This action is Vault-only. It reads the raw GitHub webhook payload from GITHUB_EVENT_PATH, adds a few CEF fields, and delegates to cef-ai/Cef-Send-Event-Action.

Usage

Create .github/workflows/cef-github-tracker.yaml:

name: CEF GitHub Tracker

on:
  pull_request:
    types: [opened, closed, reopened, synchronize]
  pull_request_review:
    types: [submitted]
  push:
    branches: ["**"]

jobs:
  send-github-event:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: read
    env:
      CEF_AGENT_ID: ${{ vars.CEF_AGENT_ID }}
      CEF_VAULT_WALLET_KEYSTORE_B64: ${{ secrets.CEF_VAULT_WALLET_KEYSTORE_B64 }}
      CEF_VAULT_WALLET_KEYSTORE_PASSWORD: ${{ secrets.CEF_VAULT_WALLET_KEYSTORE_PASSWORD }}
      GITHUB_TOKEN: ${{ github.token }}
    steps:
      - uses: cef-ai/cef-github-tracker-action@v1

For the current test Vault, Cef-Send-Event-Action already defaults these values:

CEF_VAULT_URL=https://vault-api.compute.test.ddcdragon.com
CEF_GAR_URL=https://gar.compute.test.ddcdragon.com
CEF_MARKETPLACE_URL=https://agent-marketplace.compute.test.ddcdragon.com
CEF_S3_GATEWAY_AUTH_INFO_URL=https://ddc-s3-gateway.compute.test.ddcdragon.com/auth/info
CEF_SCOPE=default
CEF_AGENT_ALIAS=productivity-agent
CEF_CUBBY_ALIAS=productivity_store

Set them as repo/org variables only when the repo needs a different Vault environment or target.

Inputs

Input	Required	Default	Description
notion_api_key	No	""	Optional Notion token included in the payload
github_token	No	""	GitHub token for agent-side enrichment. Falls back to GITHUB_TOKEN or CEF_GITHUB_TOKEN env.
gemini_api_key	No	""	Optional Gemini API key included in the payload
wiki_check_branches	No	main,master	Branches that trigger wiki staleness checks

Payload

The payload sent to Vault is the raw GitHub webhook JSON plus:

{
  "event_type": "GITHUB_ACTION_PR_EVENT",
  "github_event_name": "pull_request",
  "delivery_id": "github-run-id-run-attempt",
  "notion_api_key": "...",
  "github_token": "...",
  "gemini_api_key": "...",
  "wiki_check_branches": "main,master"
}

Cef-Send-Event-Action fills repo, branch, pr_number, and head_sha before publishing to Vault.

Version Pinning

Use a tag such as @v1 after release:

- uses: cef-ai/cef-github-tracker-action@v1