docs: clarify collaborator-only pull request policy - #750
Conversation
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
Castiron custom code✅ No new custom-code files detected. 70 mixed files remain; 0 existing customizations changed. Compared 70 existing customizations unchanged
30 more in the full report. A changed generated baseline means this report cannot reliably identify which handwritten lines changed. Inspect the custom-code diffDownload the exact patch produced by this run (requires repository access): gh run download 35887705353 --repo openai/openai-ruby \
--name castiron-custom-code-35887705353-1 --dir /tmp/castiron-custom-code-35887705353-1
git apply --stat /tmp/castiron-custom-code-35887705353-1/custom-code.patch
cat /tmp/castiron-custom-code-35887705353-1/custom-code.patchOr reproduce it from an SDK checkout containing the vendored reporter: git fetch --no-tags origin 5aae05c4b42f9d509bdf084282a7e33ef8758adc 16ee347fff880f67ec34f1f394c2f575216bac6d
python3 scripts/castiron/custom_code_report.py report \
--base 5aae05c4b42f9d509bdf084282a7e33ef8758adc \
--head 16ee347fff880f67ec34f1f394c2f575216bac6d --fetch --require-head-hash --public \
--out /tmp/castiron-custom-code-16ee347fff88
cat /tmp/castiron-custom-code-16ee347fff88/custom-code.patchThis is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 7f71b9a475
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
markstuart-oai
left a comment
There was a problem hiding this comment.
Reviewed 16ee347. The README and contribution guide consistently direct community contributions to issues, limit pull requests to collaborators, and preserve private security reporting and the existing development instructions. The shifted security-model references point to the corresponding updated guidance. No actionable findings.
Validation: immutable documentation diff, link-target and repository-guidance inspection; exact-head hosted checks are successful or intentionally skipped. No tests or builds run locally.
Summary
Make the contribution guidance match the repository's collaborator-only pull request policy. The README links to CONTRIBUTING.md, both explicitly exclude PRs from non-collaborators, and community feedback goes through issues. Existing development instructions remain available to collaborators, and security reports continue through the private disclosure process.
Retarget the existing security-model references shifted by the new contribution-policy section.
Use absolute README links to the policy and security guide so package-page readers can follow them.
Test plan
git diff --checkand targeted policy/link checks pass.Reviewed the complete diff and contributor, collaborator, and private security-reporting paths.
Built the gem and checked all relative README links against package contents and RDoc files.
Documentation only; no SDK runtime, repository settings, or generated source changes.