From 2f95c56325a18209dbae6cfd595b0260752645bd Mon Sep 17 00:00:00 2001
From: Harrison Weinstock <hkobew@amazon.com>
Date: Thu, 7 May 2026 20:13:15 +0000
Subject: [PATCH 1/2] ci: add workflow to create issues on CI failure

---
 .github/workflows/ci-failure-issue.yml | 60 ++++++++++++++++++++++++++
 1 file changed, 60 insertions(+)
 create mode 100644 .github/workflows/ci-failure-issue.yml

diff --git a/.github/workflows/ci-failure-issue.yml b/.github/workflows/ci-failure-issue.yml
new file mode 100644
index 000000000..1f8586243
--- /dev/null
+++ b/.github/workflows/ci-failure-issue.yml
@@ -0,0 +1,60 @@
+name: CI Failure Issue
+
+on:
+  workflow_run:
+    # These names must match the `name:` field in each workflow file exactly
+    workflows:
+      - "Build and Test"
+      - "Quality and Safety Checks"
+      - "E2E Tests (Full Suite)"
+      - "CodeQL"
+    types: [completed]
+
+jobs:
+  create-issue:
+    concurrency: ci-failure-issue-${{ github.event.workflow_run.name }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    if: ${{ github.event.workflow_run.conclusion == 'failure' && github.event.workflow_run.head_branch == 'main' }}
+    permissions:
+      issues: write
+    steps:
+      - uses: actions/github-script@v9
+        with:
+          script: |
+            try {
+              const workflowName = context.payload.workflow_run.name;
+
+              if (!/^[A-Za-z0-9 _()\-]+$/.test(workflowName)) {
+                core.setFailed(`Unexpected characters in workflow name: ${workflowName}`);
+                return;
+              }
+
+              const sha = context.payload.workflow_run.head_sha;
+              const runUrl = context.payload.workflow_run.html_url;
+              const branch = context.payload.workflow_run.head_branch;
+              const title = `CI Failure: ${workflowName}`;
+
+              const { data: issues } = await github.rest.issues.listForRepo({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                labels: 'high-severity,ci',
+                state: 'open',
+                per_page: 100
+              });
+
+              if (issues.some(i => i.title === title)) {
+                core.info(`Issue already exists for "${title}"`);
+                return;
+              }
+
+              await github.rest.issues.create({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                title,
+                labels: ['high-severity', 'ci'],
+                body: `## CI Failure\n\n- **Workflow:** ${workflowName}\n- **Branch:** ${branch}\n- **Commit:** ${sha}\n- **Run:** ${runUrl}\n\nPlease investigate this failure.`
+              });
+            } catch (error) {
+              core.setFailed(`Failed to create CI failure issue: ${error.message || error}`);
+            }

From cd7a90115bfe1d8fca9769beab0575a53db0bd19 Mon Sep 17 00:00:00 2001
From: Harrison Weinstock <hkobew@amazon.com>
Date: Thu, 7 May 2026 20:19:20 +0000
Subject: [PATCH 2/2] style: fix prettier formatting

---
 .github/workflows/ci-failure-issue.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci-failure-issue.yml b/.github/workflows/ci-failure-issue.yml
index 1f8586243..817fc6115 100644
--- a/.github/workflows/ci-failure-issue.yml
+++ b/.github/workflows/ci-failure-issue.yml
@@ -4,10 +4,10 @@ on:
   workflow_run:
     # These names must match the `name:` field in each workflow file exactly
     workflows:
-      - "Build and Test"
-      - "Quality and Safety Checks"
-      - "E2E Tests (Full Suite)"
-      - "CodeQL"
+      - 'Build and Test'
+      - 'Quality and Safety Checks'
+      - 'E2E Tests (Full Suite)'
+      - 'CodeQL'
     types: [completed]
 
 jobs: