feat: add dry-run mode for testing workflow without posting comments

Signed-off-by: cheese-cakee <farzanaman99@gmail.com>

Author: cheese-cakee

.github/scripts/bot-verified-commits.js

@@ -46,6 +46,7 @@ const CONFIG = {
     const parsed = Number.parseInt(process.env.MAX_PAGES ?? '5', 10);
     return Number.isInteger(parsed) && parsed > 0 ? parsed : 5;
   })(),
+  DRY_RUN: process.env.DRY_RUN === 'true',
 };
 
 // Validates PR number is a positive integer
@@ -212,9 +213,16 @@ async function postVerificationComment(
   unverifiedCount,
   truncated
 ) {
+  // Skip posting in dry-run mode
+  if (CONFIG.DRY_RUN) {
+    console.log(`[${CONFIG.BOT_NAME}] DRY_RUN enabled; skipping comment.`);
+    return true;
+  }
+
   console.log(`[${CONFIG.BOT_NAME}] Posting verification failure comment...`);
 
   try {
+
     await github.rest.issues.createComment({
       owner,
       repo,

.github/workflows/bot-verified-commits.yml

@@ -13,6 +13,12 @@ name: PythonBot - Verify PR Commits
 on:
   pull_request_target:
     types: [opened, synchronize]
+  workflow_dispatch:
+    inputs:
+      dry_run:
+        description: "Run without posting comments"
+        required: false
+        default: "true"
 
 permissions:
   contents: read
@@ -46,6 +52,9 @@ jobs:
       # Team signature
       TEAM_NAME: "Hiero Python SDK Team"
 
+      # Dry-run mode (workflow_dispatch uses input, PR events default to false)
+      DRY_RUN: ${{ github.event_name == 'workflow_dispatch' && inputs.dry_run || 'false' }}
+
     steps:
       - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
@@ -58,6 +67,9 @@ jobs:
           sparse-checkout: .github/scripts
           persist-credentials: false
 
+      - name: Log dry-run status
+        run: echo "Dry run mode: ${{ env.DRY_RUN }}"
+
       - name: Verify PR commits
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         id: verify
@@ -75,7 +87,7 @@ jobs:
             return result;
 
       - name: Fail if unverified commits found
-        if: steps.verify.outputs.success != 'true'
+        if: steps.verify.outputs.success != 'true' && env.DRY_RUN != 'true'
         run: |
           echo "❌ Pull request has unverified commits."
           echo "Please sign your commits with GPG."