OpenShell

mirror of https://github.com/NVIDIA/OpenShell.git synced 2026-11-07 08:55:37 +08:00

Files

T

John Myers 778b91e562 fix(ci): check author_association before API calls in vouch gate

The vouch-check workflow was closing PRs from NVIDIA org members because
the GITHUB_TOKEN lacks read:org scope, causing orgs.checkMembershipForUser
to return 404 for non-public members. The catch block silently swallowed
these as expected 'not found' responses.

Add an author_association check from the webhook payload as the primary
bypass. GitHub sets this field server-side (MEMBER, OWNER, COLLABORATOR)
regardless of membership visibility, with no extra token permissions
needed. The existing API calls are kept as fallbacks.

Fixes the false positive that closed #430.

2026-03-18 08:32:35 -07:00

branch-checks.yml

fix(ci): skip remote sccache config for fork PRs (#388 )

2026-03-16 19:04:34 -07:00

branch-e2e.yml

ci(release): use native GitHub release notes and add e2e gate (#318 )

2026-03-14 22:44:12 -07:00

ci-image.yml

fix(ci): use BuildKit secrets instead of build-arg for GITHUB_TOKEN (#327 )

2026-03-15 12:53:44 -07:00

dco.yml

ci(release): use native GitHub release notes and add e2e gate (#318 )