Private ephemeral worker runner for jbot-review.
The control plane's pump (POST /internal/pump → GithubActionsDispatcher) triggers
.github/workflows/review.yml via workflow_dispatch, once per queued review. Each run
is one ephemeral worker: it pulls the public ghcr.io/pgup-ai/jbot-review:latest
image, claims a single job from CONTROL_PLANE_URL/internal/jobs/claim (with
WORKER_ONESHOT=1), reviews it, reports back, and exits. The runner is destroyed per
job — the isolation contract for running untrusted PR code.
| Secret | Value |
|---|---|
WORKER_SHARED_SECRET |
must equal the control plane's WORKER_SHARED_SECRET |
CONTROL_PLANE_URL |
public HTTPS URL of the control plane (a tunnel for local; prod URL otherwise) |
No provider keys, no GHCR_TOKEN — the image is public, and the decrypted provider
key is handed to the worker per-job by the control plane's claim response.
See jbot-review-app/docs/EPHEMERAL-RUNNER-SETUP.md for the full setup + cutover runbook.