[foadshafighi]

Summary

The Codex Code Review check fails on every pull request before Codex starts (seen on #226 and #227):

Error: Could not restrict access to /run/dbus/system_bus_socket.
    at restrictRootServiceSocket (.../openai/codex-action/.../dist/main.js:25697:13)

The job runs on ubuntu-latest, which now resolves to the ubuntu-26.04 image (run 42826956843: Ubuntu 26.04.1, image version 20261101.186.1). codex-action's drop-sudo step fails on that image; this is upstream issue openai/codex-action#188, with a fix proposed in openai/codex-action#191 and not yet released. Other projects affected by it pin the job to ubuntu-24.04.

Change

• .github/workflows/codex-review.yml: runs-on: ubuntu-24.04 for the Codex job, with a comment naming the upstream issue and when to return to ubuntu-latest.

Verification

The workflow triggers on pull_request, so this PR's own Codex Code Review run uses the pinned runner and shows whether the fix works.

[github-actions]

Codex Automated Code Review

Code Review Summary

PR: Pins the Codex review job to Ubuntu 24.04 to avoid the documented drop-sudo failure on Ubuntu 26.04.

P0 - Critical Issues (Must Fix)

None found

P1 - High Priority Issues (Should Fix)

None found

P2 - Medium Priority Issues (Consider Fixing)

None found

P3 - Low Priority Issues (Optional)

None found

Positive Observations

• The runner change is narrowly scoped and preserves existing workflow permissions and safeguards.
• Comments explain the workaround, reference upstream issues, and identify when to remove the pin.

Reviewed the complete diff and surrounding workflow. GitHub-hosted execution was not available locally.

---

Automated review by OpenAI Codex

[greptile-apps]

Confidence Score: 5/5

[Low impact] The PR appears safe to merge.

Summary

Pins the Codex review job to ubuntu-24.04 to avoid the reported drop-sudo failure.

• The Codex review job now runs on Ubuntu 24.04.

_{Reviews (1) · Last reviewed commit: "ci: pin the Codex review job to ubuntu-2..." · Reviewed by Greptile}