mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-07 19:32:17 +00:00
kevinveenbirkenbachandClaude Opus 4.7
86a998159b
The previous strip targeted only `--local` config and the resulting CI log showed local was already empty, yet the push still authed as github-actions[bot]. The auth has to be coming from --global, --system, --worktree, or GH_TOKEN itself is GITHUB_TOKEN. Dump every scope's http/credential/url entries before and after the strip, and probe /installation/repositories with GH_TOKEN so the HTTP status alone (no secret in logs) tells us whether it's an App installation token or the workflow GITHUB_TOKEN. Will replace this with the real fix once the next CI run surfaces where the rogue Authorization actually originates. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
GitHub Workflow Helpers 🔧
This directory holds the shell helpers that GitHub Actions workflows under .github/workflows/ call. Helpers are grouped by responsibility into subfolders so each workflow file pulls only from the clusters it actually needs.
Subfolders 🗂️
| Subfolder | Responsibility |
|---|---|
| runner/ | Host-runner hygiene around image builds and deploys (disk, swap, Docker daemon, diagnostics). |
| cancel/ | Cancellation of in-progress workflow runs on PR-close and branch-delete events. |
| resolve/ | Derivation of structured workflow inputs and outputs from repository state. |
| update/ | The scheduled Update: Versions pipeline (version bumps and PR open/refresh). |
| release/ | Release-time gates that decide whether a tagged commit may be released. |
A new helper MUST live in the subfolder that matches its responsibility. New responsibilities MAY motivate a new subfolder, but MUST NOT flatten back into the top level.
For the workflow catalog see workflows.md. For the repository Make target index see make.md.