Skip to content
Draft
2 changes: 1 addition & 1 deletion .github/CODEOWNERS
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# This file defines code owners for the OpenVINO GenAI repository

# Default owners
# Default owners x
Copy link

Copilot AI Apr 14, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The trailing x in the comment looks accidental and makes the comment read incorrectly. Recommend changing it back to # Default owners.

Suggested change
# Default owners x
# Default owners

Copilot uses AI. Check for mistakes.
* @Wovchena @as-suvorov

# CI
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -5,10 +5,10 @@
2026-01-12T08:52:38.1920000Z Evaluating Build.Build.if
2026-01-12T08:52:38.1920000Z Evaluating: success()
2026-01-12T08:52:38.1920000Z Result: true
2026-01-12T08:52:38.1920000Z Requested labels: aks-linux-16-cores-32gb
2026-01-12T08:52:38.1920000Z Requested labels: aks-linux-16-cores-32gb-st
2026-01-12T08:52:38.1920000Z Job defined at: openvinotoolkit/openvino/.github/workflows/job_build_linux.yml@refs/pull/33540/merge
2026-01-12T08:52:38.1920000Z Reusable workflow chain:
2026-01-12T08:52:38.1920000Z openvinotoolkit/openvino/.github/workflows/ubuntu_22.yml@refs/pull/33540/merge (4a047279a51135cf69f1113f9682335d3f75cf75)
2026-01-12T08:52:38.1920000Z -> openvinotoolkit/openvino/.github/workflows/job_build_linux.yml@refs/pull/33540/merge (4a047279a51135cf69f1113f9682335d3f75cf75)
2026-01-12T08:52:38.1920000Z Waiting for a runner to pick up this job...
2026-01-12T08:52:46.0940000Z Job is about to start running on the runner: aks-linux-16-cores-32gb
2026-01-12T08:52:46.0940000Z Job is about to start running on the runner: aks-linux-16-cores-32gb-st
Original file line number Diff line number Diff line change
Expand Up @@ -5,10 +5,10 @@
2026-01-12T09:11:37.7200000Z Evaluating Samples.Samples.if
2026-01-12T09:11:37.7200000Z Evaluating: success()
2026-01-12T09:11:37.7200000Z Result: true
2026-01-12T09:11:37.7270000Z Requested labels: aks-linux-4-cores-16gb
2026-01-12T09:11:37.7270000Z Requested labels: aks-linux-4-cores-16gb-st
2026-01-12T09:11:37.7270000Z Job defined at: openvinotoolkit/openvino/.github/workflows/job_samples_tests.yml@refs/pull/33540/merge
2026-01-12T09:11:37.7270000Z Reusable workflow chain:
2026-01-12T09:11:37.7270000Z openvinotoolkit/openvino/.github/workflows/ubuntu_22.yml@refs/pull/33540/merge (4a047279a51135cf69f1113f9682335d3f75cf75)
2026-01-12T09:11:37.7270000Z -> openvinotoolkit/openvino/.github/workflows/job_samples_tests.yml@refs/pull/33540/merge (4a047279a51135cf69f1113f9682335d3f75cf75)
2026-01-12T09:11:37.7270000Z Waiting for a runner to pick up this job...
2026-01-12T09:11:44.4120000Z Job is about to start running on the runner: aks-linux-4-cores-16gb
2026-01-12T09:11:44.4120000Z Job is about to start running on the runner: aks-linux-4-cores-16gb-st
2 changes: 1 addition & 1 deletion .github/workflows/cleanup_caches.yml
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ permissions: read-all
jobs:
Cleanup_OV_CACHE:
name: Cleanup OV_CACHE
runs-on: aks-linux-4-cores-16gb
runs-on: aks-linux-4-cores-16gb-st
if: ${{ github.repository_owner == 'openvinotoolkit' }}
container:
image: openvinogithubactions.azurecr.io/dockerhub/ubuntu:20.04
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/coverity.yml
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-medium
runs-on: aks-linux-medium-st
container:
image: 'openvinogithubactions.azurecr.io/openvino_provider:0.1.0'
volumes:
Expand Down Expand Up @@ -70,7 +70,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-16-cores-64gb
runs-on: aks-linux-16-cores-64gb-st
container:
image: openvinogithubactions.azurecr.io/ov_build/ubuntu_22_04_x64:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
Expand Down
47 changes: 25 additions & 22 deletions .github/workflows/linux.yml
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,9 @@ env:
BASE_PRODUCT_TYPE: public_linux_ubuntu_22_04_x86_64
GENAI_WHEELS_ARTIFACT_NAME: 'genai_wheels'
GENAI_ARCHIVE_ARTIFACT_BASE_NAME: 'genai_archive'
# To switch to the primary HF token, change the filename suffix to remove `-secondary`:
# HF_TOKEN_PATH: /home/runner/secrets/huggingface/hf-token
HF_TOKEN_PATH: /home/runner/secrets/huggingface/hf-token-secondary
Comment on lines +38 to +40
Copy link

Copilot AI Apr 20, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR description still contains template placeholders (e.g., Fixes #(issue)) and the checklist is left unchecked. Please update the PR description/checklist to reflect the actual change scope and testing before merging/reviewing further.

Copilot uses AI. Check for mistakes.
Comment on lines +38 to +40
Copy link

Copilot AI Apr 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

HF_TOKEN_PATH is introduced but never referenced anywhere else in this workflow (no steps export HF_TOKEN from this file, and HF_TOKEN is no longer passed into the container). As a result, Hugging Face-authenticated downloads/tests will not receive a token. Add a step that reads the token from HF_TOKEN_PATH and exports it (or pass the needed env var into the container) so downstream tools can authenticate.

Copilot uses AI. Check for mistakes.

jobs:
smart_ci:
Expand Down Expand Up @@ -82,7 +85,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-medium
runs-on: aks-linux-medium-st
Copy link

Copilot AI Apr 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PR metadata appears out of sync with the actual changes: the title/description reference “test-hf-token-rate-limit” and still contain placeholders (e.g., “Fixes #(issue)”) and an unchecked checklist, but this PR only updates GitHub Actions runner labels (e.g., switching to *-st runners). Please update the PR title/description to reflect the runner-label migration intent and either fill out the checklist or explicitly mark items N/A/remove placeholders.

Copilot uses AI. Check for mistakes.
Copy link

Copilot AI Apr 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PR metadata still contains template placeholders (e.g., "Fixes #(issue)") and the checklist is entirely unchecked. Please update the PR description to reflect the actual motivation/impact of switching runner labels to "*-st" and mark the relevant checklist items (tests/docs/ticket coverage) before this is considered for merge.

Copilot uses AI. Check for mistakes.
container:
image: 'openvinogithubactions.azurecr.io/openvino_provider:0.1.0'
volumes:
Expand Down Expand Up @@ -126,7 +129,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-4-cores-16gb
runs-on: aks-linux-4-cores-16gb-st
container:
image: openvinogithubactions.azurecr.io/ov_build/ubuntu_22_04_x64:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
Expand Down Expand Up @@ -255,7 +258,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-4-cores-16gb
runs-on: aks-linux-4-cores-16gb-st
container:
image: openvinogithubactions.azurecr.io/ov_build/ubuntu_22_04_x64:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
Expand Down Expand Up @@ -316,7 +319,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-8-cores-16gb
runs-on: aks-linux-8-cores-16gb-st
container:
image: openvinogithubactions.azurecr.io/ov_build/ubuntu_22_04_x64:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
Expand Down Expand Up @@ -388,7 +391,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-medium
runs-on: aks-linux-medium-st
container:
image: openvinogithubactions.azurecr.io/library/python:3.12-slim
volumes:
Expand Down Expand Up @@ -442,7 +445,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-4-cores-16gb
runs-on: aks-linux-4-cores-16gb-st
container:
image: openvinogithubactions.azurecr.io/ov_build/ubuntu_22_04_x64:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
Expand Down Expand Up @@ -516,7 +519,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-4-cores-16gb
runs-on: aks-linux-4-cores-16gb-st
container:
image: openvinogithubactions.azurecr.io/ov_build/ubuntu_22_04_x64:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
Expand Down Expand Up @@ -647,13 +650,13 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-8-cores-32gb
runs-on: aks-linux-8-cores-32gb-st
container:
image: openvinogithubactions.azurecr.io/ov_test/ubuntu_22_04_x64:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
- /mount:/mount
- /home/runner/secrets/huggingface:/home/runner/secrets/huggingface:ro
Copy link

Copilot AI Apr 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Mounting /home/runner/secrets/huggingface from the host into the job container exposes that secrets directory to any commands executed in this workflow. Since this workflow runs on pull_request, this can enable secret exfiltration by untrusted PR code. Consider avoiding host-path secret mounts for PRs, or gating the mount/token use to trusted events (e.g., push/merge_group) or trusted actors.

Suggested change
- /home/runner/secrets/huggingface:/home/runner/secrets/huggingface:ro

Copilot uses AI. Check for mistakes.
- ${{ github.workspace }}:${{ github.workspace }}
options: -e HF_TOKEN

env:
INSTALL_DIR: ${{ github.workspace }}/install
Expand All @@ -669,7 +672,7 @@ jobs:
path: ${{ env.SRC_DIR }}
submodules: recursive

- name: Download Build Artifacts
- name: Download Build Artifactsx
Copy link

Copilot AI Apr 21, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Step name has an extra trailing character (Artifactsx), which looks like an accidental typo and makes CI logs harder to scan. Rename it back to "Download Build Artifacts".

Suggested change
- name: Download Build Artifactsx
- name: Download Build Artifacts

Copilot uses AI. Check for mistakes.
if: ${{ matrix.test.run_condition }}
uses: akashchi/download-artifact@d59a9c15fec3fdb7c9adf09464124d00f9c11415
with:
Expand Down Expand Up @@ -702,12 +705,12 @@ jobs:
marker: 'llm'
cmd: 'tests/python_tests/samples'
run_condition: ${{ fromJSON(needs.smart_ci.outputs.affected_components).LLM_samples.test }}
runner: 'aks-linux-4-cores-16gb'
runner: 'aks-linux-4-cores-16gb-st'
- name: 'Whisper'
marker: 'whisper'
cmd: 'tests/python_tests/samples'
run_condition: ${{ fromJSON(needs.smart_ci.outputs.affected_components).Whisper_samples.test }}
runner: 'aks-linux-4-cores-16gb'
runner: 'aks-linux-4-cores-16gb-st'
- name: 'dreamlike_anime_1_0'
marker: 'dreamlike_anime_1_0'
cmd: 'tests/python_tests/samples'
Expand All @@ -717,7 +720,7 @@ jobs:
marker: 'LCM_Dreamshaper_v7_int8_ov'
cmd: 'tests/python_tests/samples'
run_condition: ${{ fromJSON(needs.smart_ci.outputs.affected_components).Image_generation_samples.test }}
runner: 'aks-linux-4-cores-16gb'
runner: 'aks-linux-4-cores-16gb-st'
# Test hangs on Linux. Ticket: 181387
# - name: 'VLM'
# marker: 'vlm'
Expand All @@ -727,17 +730,17 @@ jobs:
- name: 'Rag'
marker: 'rag'
cmd: 'tests/python_tests/samples'
runner: 'aks-linux-4-cores-16gb'
runner: 'aks-linux-4-cores-16gb-st'
run_condition: ${{ fromJSON(needs.smart_ci.outputs.affected_components).RAG_samples.test }}
- name: 'Speech generation'
marker: 'speech_generation'
cmd: 'tests/python_tests/samples'
runner: 'aks-linux-4-cores-16gb'
runner: 'aks-linux-4-cores-16gb-st'
run_condition: ${{ fromJSON(needs.smart_ci.outputs.affected_components).Speech_generation_samples.test }}
- name: 'Eagle3 decoding'
marker: 'eagle3_decoding'
cmd: 'tests/python_tests/samples'
runner: 'aks-linux-4-cores-16gb'
runner: 'aks-linux-4-cores-16gb-st'
run_condition: ${{ fromJSON(needs.smart_ci.outputs.affected_components).speculative_decoding.test }}

timeout-minutes: 120
Expand All @@ -749,8 +752,8 @@ jobs:
image: openvinogithubactions.azurecr.io/ov_test/ubuntu_22_04_x64:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
- /mount:/mount
- /home/runner/secrets/huggingface:/home/runner/secrets/huggingface:ro
- ${{ github.workspace }}:${{ github.workspace }}
options: -e HF_TOKEN
env:
INSTALL_DIR: ${{ github.workspace }}/ov
SRC_DIR: ${{ github.workspace }}/src
Expand Down Expand Up @@ -842,13 +845,13 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-4-cores-16gb
runs-on: aks-linux-4-cores-16gb-st
container:
image: openvinogithubactions.azurecr.io/ov_test/ubuntu_22_04_x64:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
- /mount:/mount
- /home/runner/secrets/huggingface:/home/runner/secrets/huggingface:ro
- ${{ github.workspace }}:${{ github.workspace }}
options: -e HF_TOKEN

env:
INSTALL_DIR: ${{ github.workspace }}/ov
Expand Down Expand Up @@ -930,13 +933,13 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-4-cores-16gb
runs-on: aks-linux-4-cores-16gb-st
container:
image: openvinogithubactions.azurecr.io/ov_test/ubuntu_22_04_x64:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
- /mount:/mount
- /home/runner/secrets/huggingface:/home/runner/secrets/huggingface:ro
- ${{ github.workspace }}:${{ github.workspace }}
options: -e HF_TOKEN

env:
OV_INSTALL_DIR: ${{ github.workspace }}/ov
Expand Down Expand Up @@ -1011,7 +1014,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-4-cores-16gb
runs-on: aks-linux-4-cores-16gb-st
container:
image: openvinogithubactions.azurecr.io/ov_build/ubuntu_22_04_x64:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/mac.yml
Original file line number Diff line number Diff line change
Expand Up @@ -71,7 +71,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-medium
runs-on: aks-linux-medium-st
container:
image: 'openvinogithubactions.azurecr.io/openvino_provider:0.1.0'
volumes:
Expand Down
23 changes: 13 additions & 10 deletions .github/workflows/manylinux_2_28.yml
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,9 @@ env:
BASE_PRODUCT_TYPE: public_manylinux_2_28_x86_64
GENAI_WHEELS_ARTIFACT_NAME: 'genai_wheels'
GENAI_ARCHIVE_ARTIFACT_BASE_NAME: 'genai_archive'
# To switch to the primary HF token, change the filename suffix to remove `-secondary`:
# HF_TOKEN_PATH: /home/runner/secrets/huggingface/hf-token
HF_TOKEN_PATH: /home/runner/secrets/huggingface/hf-token-secondary
Comment on lines +38 to +40
Copy link

Copilot AI Apr 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

HF_TOKEN_PATH is defined but not used anywhere else in this workflow, and HF_TOKEN is no longer passed into the test containers. This likely means Hugging Face authentication is silently lost for tests that require it. Please add a step to export a token from HF_TOKEN_PATH (or reintroduce the required container env pass-through) so the intended token switch actually takes effect.

Copilot uses AI. Check for mistakes.

jobs:
smart_ci:
Expand Down Expand Up @@ -82,7 +85,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-medium
runs-on: aks-linux-medium-st
container:
image: 'openvinogithubactions.azurecr.io/openvino_provider:0.1.0'
volumes:
Expand Down Expand Up @@ -126,7 +129,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-4-cores-16gb
runs-on: aks-linux-4-cores-16gb-st
container:
image: openvinogithubactions.azurecr.io/ov_build/manylinux_2_28:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
Expand Down Expand Up @@ -243,7 +246,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-4-cores-16gb
runs-on: aks-linux-4-cores-16gb-st
container:
image: openvinogithubactions.azurecr.io/ov_build/manylinux_2_28:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
Expand Down Expand Up @@ -302,7 +305,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-8-cores-16gb
runs-on: aks-linux-8-cores-16gb-st
container:
image: openvinogithubactions.azurecr.io/ov_build/manylinux_2_28:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
Expand Down Expand Up @@ -368,7 +371,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-4-cores-16gb
runs-on: aks-linux-4-cores-16gb-st
container:
image: openvinogithubactions.azurecr.io/ov_build/manylinux_2_28:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
Expand Down Expand Up @@ -431,7 +434,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-medium
runs-on: aks-linux-medium-st
container:
image: openvinogithubactions.azurecr.io/library/python:3.12-slim
volumes:
Expand Down Expand Up @@ -570,13 +573,13 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-8-cores-32gb
runs-on: aks-linux-8-cores-32gb-st
container:
image: openvinogithubactions.azurecr.io/ov_test/ubuntu_22_04_x64:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
- /mount:/mount
- /home/runner/secrets/huggingface:/home/runner/secrets/huggingface:ro
- ${{ github.workspace }}:${{ github.workspace }}
options: -e HF_TOKEN

Comment on lines 580 to 583
Copy link

Copilot AI Apr 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This workflow mounts /home/runner/secrets/huggingface from the host into the container. On pull_request runs, that can leak host secrets to PR-controlled code. Please avoid host-path secret mounts in PR workflows, or gate this mount/token usage to trusted events/actors only.

Copilot uses AI. Check for mistakes.
env:
INSTALL_DIR: ${{ github.workspace }}/install
Expand Down Expand Up @@ -621,13 +624,13 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-4-cores-16gb
runs-on: aks-linux-4-cores-16gb-st
container:
image: openvinogithubactions.azurecr.io/ov_test/ubuntu_22_04_x64:${{ needs.openvino_download.outputs.docker_tag }}
volumes:
- /mount:/mount
- /home/runner/secrets/huggingface:/home/runner/secrets/huggingface:ro
- ${{ github.workspace }}:${{ github.workspace }}
options: -e HF_TOKEN

env:
OV_INSTALL_DIR: ${{ github.workspace }}/ov
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/windows.yml
Original file line number Diff line number Diff line change
Expand Up @@ -75,7 +75,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-medium
runs-on: aks-linux-medium-st
container:
image: 'openvinogithubactions.azurecr.io/openvino_provider:0.1.0'
volumes:
Expand Down Expand Up @@ -506,7 +506,7 @@ jobs:
defaults:
run:
shell: bash
runs-on: aks-linux-medium
runs-on: aks-linux-medium-st
container:
image: openvinogithubactions.azurecr.io/library/python:3.12-slim
volumes:
Expand Down
Loading