GitHub PR comments trigger Codex Cloud tasks without @codex mention
What issue are you seeing?
Normal GitHub PR review comments are unexpectedly triggering Codex Cloud tasks in my personal workspace.
When this happens, Codex reacts to the comment with 👀, starts a Cloud task, and attempts to address/implement the contents of my comment.
The triggering comments do not mention @codex.
The PR where I observed this was created by another user, not by me or by a Codex task in my workspace. I was only reviewing/commenting on their PR. I will also test whether the same behavior occurs on PRs created by me.
This started happening after I enabled a Codex workspace for the repository. Auto review is disabled.
What steps can reproduce the bug?
- Enable a Codex workspace for a GitHub repository.
- Keep Auto review disabled.
- Open a PR created by another user.
- Leave normal PR review comments without mentioning @codex.
- Some comments receive a 👀 reaction from Codex.
- A Codex Cloud task is automatically created in my personal workspace.
- The agent starts working on the PR and attempts to address/implement the comment.
Not every comment triggers this behavior. Some normal comments receive no 👀 reaction and create no task, so there appears to be some implicit/semantic trigger determining which comments are treated as agent instructions.
What is the expected behavior?
Normal PR comments should not start Codex Cloud tasks unless Codex is explicitly invoked.
With Auto review disabled and no @codex mention, my review comments should remain ordinary GitHub comments and should not cause an agent to start working on or modifying someone else's PR.
Even if a comment is detected as review feedback, I would not expect that alone to implicitly start an implementation task in my workspace.
Additional information
My current code review settings are:
- Auto review: Off
- Review trigger: Smart detect (Experimental)
- Exhaustive code review: Off
- Individual ChatGPT/Codex account with a personal workspace
The affected PR was created by another user. I was only reviewing/commenting on their PR.
One additional detail is that I did not observe this behavior before creating/enabling a Codex workspace for this repository. It only started after the workspace was enabled.
Both users involved use separate individual ChatGPT/Codex subscriptions and separate personal workspaces. We do not use a shared/team Codex workspace. Despite the PR belonging to the other user, my review comments can trigger Codex Cloud tasks specifically in my own workspace.
I will also test this behavior on PRs created by me to determine whether PR ownership affects the trigger.
This seems related to #11442, but there is an important difference: in my case, the triggering comments do not contain @codex at all.
I can provide example PR comment links and corresponding Codex Cloud task IDs if needed.