Use agent-build/agent-devx teams in EXCEPTION_APPROVERS

Keeps the runtime exception-approver check consistent with the
CODEOWNERS entry for the limits file, which already uses agent-build
and agent-devx since agent-supply-chain has no Slack channel mapping.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Author: jszwedko

.github/chainguard/self.gitlab.static-quality-gates.sts.yaml

@@ -8,8 +8,9 @@ claim_pattern:
   ref: ".+"
 
 # Used by the static_quality_gates job to comment on PRs and to check whether
-# an approving reviewer is a member of @DataDog/agent-supply-chain, which
-# grants an exception to the per-PR size threshold.
+# an approving reviewer is a member of one of the teams in EXCEPTION_APPROVERS
+# (tasks/static_quality_gates/decisions.py), which grants an exception to the
+# per-PR size threshold.
 permissions:
   contents: read
   pull_requests: write

tasks/static_quality_gates/decisions.py

@@ -24,11 +24,12 @@
 }
 # Individuals or teams allowed to grant per-PR size threshold exceptions.
 # Entries are either plain GitHub usernames (e.g. "cmourot") or team references
-# in the form "Org/team-slug" (e.g. "DataDog/agent-supply-chain"), which are
-# expanded to their current membership at check time.
+# in the form "Org/team-slug" (e.g. "DataDog/agent-build"), which are expanded
+# to their current membership at check time.
 EXCEPTION_APPROVERS = {
     "cmourot",
-    "DataDog/agent-supply-chain",
+    "DataDog/agent-build",
+    "DataDog/agent-devx",
 }
 
 

tasks/unit_tests/static_quality_gates/decisions_tests.py

@@ -302,17 +302,17 @@ def test_expands_team_reference_with_correct_slug(self):
         mock_pr.get_reviews.return_value = [mock_review]
 
         fetcher = MagicMock(return_value={"someone"})
-        with patch("tasks.static_quality_gates.decisions.EXCEPTION_APPROVERS", {"DataDog/agent-supply-chain"}):
+        with patch("tasks.static_quality_gates.decisions.EXCEPTION_APPROVERS", {"DataDog/agent-build"}):
             checker = ExceptionApprovalChecker(mock_pr, team_members_fetcher=fetcher)
             self.assertEqual(checker.get(), "someone")
-        fetcher.assert_called_once_with("agent-supply-chain")
+        fetcher.assert_called_once_with("agent-build")
 
     def test_mixed_list_combines_plain_usernames_and_team_members(self):
         """A list mixing plain usernames and a team reference authorizes members of both."""
         fetcher = MagicMock(return_value={"alopezz"})
         with patch(
             "tasks.static_quality_gates.decisions.EXCEPTION_APPROVERS",
-            {"cmourot", "DataDog/agent-supply-chain"},
+            {"cmourot", "DataDog/agent-build"},
         ):
             for approver in ("cmourot", "alopezz"):
                 with self.subTest(approver=approver):