Add comprehensive Devin file operations workflow demonstration

[devin-ai-integration]

Add comprehensive Devin file operations workflow demonstration

Summary

This PR adds a new GitHub Actions workflow (devin-file-operations.yml) that demonstrates the complete file operations capabilities of the Devin API GitHub Action. The workflow showcases how to:

1. Create a Devin session for automated code analysis
2. Upload context files to provide Devin with project-specific information (upload-files)
3. Send additional instructions via messages (send-message)
4. Download analysis deliverables from Devin sessions (download-attachment-files - newly implemented)
5. Update session tags for organization (update-tags)
6. Save downloaded files as workflow artifacts

The workflow is triggered manually (workflow_dispatch) and provides four analysis types: security-audit, code-quality-review, architecture-analysis, and performance-analysis. It uploads three context files (project structure, security checklist, analysis instructions) to guide Devin's analysis.

Key Points:

• This is a demonstration/documentation workflow, not production-ready code
• References the feature branch @devin/1762363168-devin-api-download-attachments from DEVIN-GITHUB-ACTIONS PR #4
• Uses placeholder UUIDs (REPLACE_WITH_ACTUAL_UUID) in download steps - clearly documented in the workflow output
• Complements existing workflows (devin-code-review.yml, devin-test-fix.yml) by showcasing file operations

Review & Testing Checklist for Human

• Verify YAML syntax - Ensure the workflow file is valid YAML and follows GitHub Actions best practices
• Review branch reference - The workflow references @devin/1762363168-devin-api-download-attachments. Decide if this should be merged now or wait for PR Optimize HikariCP connection pooling across all microservices #4 to merge, then update to @main
• Test workflow manually - Trigger the workflow with an actual DEVIN_API_KEY secret to verify it creates a session and uploads files correctly. Note: Download steps will fail with placeholder UUIDs (expected behavior)
• Verify demonstration accuracy - Review that the workflow correctly demonstrates the intended file operations and serves its documentation purpose
• Check file paths - Confirm /tmp/devin-context is appropriate for GitHub's ubuntu-latest runners

Test Plan

1. Ensure DEVIN_API_KEY secret is configured in the repository
2. Manually trigger the workflow via Actions tab with any analysis type
3. Verify the workflow successfully:
   • Creates a Devin session (check session URL in output)
   • Uploads the three context files
   • Displays clear documentation about placeholder UUIDs
4. (Optional) For full end-to-end testing: Wait for a Devin session to complete and upload files, then update the UUIDs and re-run to verify download functionality

Notes

• This PR depends on DEVIN-GITHUB-ACTIONS PR #4 which implements the download-attachment-files endpoint
• The placeholder UUIDs are intentional - they demonstrate the API structure while making it clear that real UUIDs are needed
• Once PR Optimize HikariCP connection pooling across all microservices #4 merges, consider updating the branch reference to @main or a semantic version tag
• The workflow includes detailed comments and output messages to serve as inline documentation

Link to Devin run: https://app.devin.ai/sessions/de834578e708491d9e12a84dffc5d1c0
Requested by: Sam Fertig (@samfert-codeium)

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring

[github-actions]

🤖 Devin Code Review

Devin is reviewing this pull request for:

• Code quality and best practices
• Security vulnerabilities
• Spring Boot and microservices patterns
• Test coverage

Session URL: https://app.devin.ai/sessions/a336da3493e44db9967383a02e8971a8
Session ID: devin-a336da3493e44db9967383a02e8971a8

Devin will analyze the changes and provide feedback. You can monitor the progress at the session URL above.

---

This review was automatically triggered by the GitHub Actions workflow.