Codex PR review posted as a comment

1name: Codex PR review2on:3  pull_request:4    types: [opened]5jobs:6  codex:7    runs-on: ubuntu-latest8    permissions:9      contents: read10    outputs:11      final_message: ${{ steps.run_codex.outputs.final-message }}12    steps:13      - uses: actions/checkout@v514        with:15          ref: refs/pull/${{ github.event.pull_request.number }}/merge16          persist-credentials: false17      - name: Run Codex18        id: run_codex19        uses: openai/codex-action@v120        with:21          openai-api-key: ${{ secrets.OPENAI_API_KEY }}22          permission-profile: ":read-only"23          prompt: |24            Review PR #${{ github.event.pull_request.number }} in ${{ github.repository }}.25            Focus on correctness and security. Be concise.26  post_feedback:27    runs-on: ubuntu-latest28    needs: codex29    if: needs.codex.outputs.final_message != ''30    permissions:31      pull-requests: write32    steps:33      - uses: actions/github-script@v734        env:35          CODEX_FINAL_MESSAGE: ${{ needs.codex.outputs.final_message }}36        with:37          script: |38            await github.rest.issues.createComment({39              owner: context.repo.owner, repo: context.repo.repo,40              issue_number: context.payload.pull_request.number,41              body: process.env.CODEX_FINAL_MESSAGE,42            });