More Review Actions Triggers & Review objects

[wu21-web]

Requesting for some features. Github allows comments on individual commits, so I'd want to know if maintainers like these feature designs (not implemented yet):

1. The ability to trigger code review action on a pull request comment by users with write access, e.g @github-actions[bot] review or @github-actions review. I propose this as the allowed_association. Credits to hustcer here. Maybe we implement this in action.yml, seems like a small change to me.
2. The ability to trigger code review action and post generic code review (without line specific reviews and inline suggestions).
   Same for here, only triggerable by users with write access,corresponding code-owners or collaborators and repository owners/admins.

[Dante-dan]

One scope distinction may help. action.yml already accepts base_ref and head_sha for issue_comment-triggered runs and resolves PR context, while post-review-comments.js creates Review objects for inline batches and uses the sticky PR issue comment for findings without line locations. If the second proposal means a formal PR Review with a body but no inline comments, that is distinct from today’s summary comment.

For the trigger, would you prefer a documented author_association allowlist or a check of the commenter’s current repository permission? The first is a simple policy gate; the second more literally implements “write access” but needs the caller workflow to query current permission before invoking this composite action, since action.yml does not declare event triggers itself.

[wu21-web]

@Dante-dan Like I said, #1 is already done.