versus workflows: Update existing PR if any instead of closing/opening

[kingthorin]

Similar to the recent auth-tests addition.

[thc202]

This will not work as intended, the step # Update to the latest upstream needs to be changed as well, pushing the same content as the upstream is what closes the PR.

I'd also prefer that we don't fail the workflow when the PR is just being updated, there's no reason to and just creates noise (still getting one each day).

[kingthorin]

I'll look at the first point.
For the failures:

          gh pr view --json mergedAt|jq -e '.mergedAt' && gh pr create --fill
          gh pr view --json mergedAt|jq -e '.mergedAt' && gh pr create --fill && true

(or ;; true)

[kingthorin]

I updated the juiceshop workflow, does that address your first concern?

[thc202]

Seems so, it's no longer pushing the latest from upstream.

[kingthorin]

And which option for the failures or do you have another idea?

[thc202]

I don't mind which way as long as it only fails if there's an actual failure (to create the PR or push the changes).

[kingthorin]

In that case it would require something more like exit code logic, but I'm not sure they get specific enough.

For the time being, let's narrow this PR down to adjusting the PR logic in other workflows. Then I can look at the failure logic in another?

[thc202]

I'm fine with that, there aren't other ongoing PRs so failures should be minimal.

[kingthorin]

All adjusted.

[Copilot]

Pull request overview

Updates multiple GitHub Actions workflows that publish scan/auth results to zaproxy/zaproxy-website so repeated runs update the same branch/PR rather than creating new PRs each time.

Changes:

• Removes the explicit “sync fork branch to upstream/main” steps from the zap-vs-* workflows.
• Pushes results to a fixed branch name with force push and attempts gh pr create --fill, ignoring failures (intended to no-op when the PR already exists).
• Aligns auth-tests.yml PR creation behavior with the “attempt create, ignore failure” approach.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 15 comments.

Show a summary per file

File	Description
.github/workflows/zap-vs-webseclab.yml	Updates PR-raising step to force-push a fixed branch and attempt PR creation without failing if it already exists.
.github/workflows/zap-vs-wavsep.yml	Same PR update behavior for wavsep results.
.github/workflows/zap-vs-ssti.yml	Same PR update behavior for SSTI results.
.github/workflows/zap-vs-owasp-benchmark.yml	Same PR update behavior for OWASP Benchmark results.
.github/workflows/zap-vs-juiceshop.yml	Same PR update behavior for Juice Shop results.
.github/workflows/zap-vs-firingrange.yml	Same PR update behavior for Firing Range results.
.github/workflows/zap-vs-crawlmaze.yml	Same PR update behavior for Crawl Maze results.
.github/workflows/auth-tests.yml	Switches to `gh pr create --fill

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[thc202]

Thank you!