OpenShell

trending/OpenShell

Fork 0

mirror of https://github.com/NVIDIA/OpenShell.git synced 2026-10-31 07:44:57 +08:00

Files

T

History

John T. MyersandJohn Myers 82cb8d2bed fix(ci): use ORG_READ_TOKEN for org membership check in vouch gate (#445 )

The GITHUB_TOKEN cannot determine org membership — it lacks read:org
scope and this is not configurable via the permissions block. Both
author_association and orgs.checkMembershipForUser return NONE/404 for
org members (even public ones) when called with the repo-scoped token.

Use an ORG_READ_TOKEN secret (fine-grained PAT with read:org) when
available, falling back to GITHUB_TOKEN. Also restores the
checkCollaborator fallback since the PAT can resolve that too.

Setup required: create a fine-grained PAT with Organization > Members >
Read permission, then add it as a repo secret named ORG_READ_TOKEN.

Co-authored-by: John Myers <johntmyers@users.noreply.github.com>

2026-03-18 09:24:19 -07:00

branch-checks.yml

fix(ci): skip remote sccache config for fork PRs (#388 )

2026-03-16 19:04:34 -07:00

branch-e2e.yml

ci(release): use native GitHub release notes and add e2e gate (#318 )

2026-03-14 22:44:12 -07:00

ci-image.yml

fix(ci): use BuildKit secrets instead of build-arg for GITHUB_TOKEN (#327 )

2026-03-15 12:53:44 -07:00

dco.yml

ci(release): use native GitHub release notes and add e2e gate (#318 )