0 Fork 0

mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-08 03:38:23 +00:00

Files

T

kevinveenbirkenbachandClaude Opus 5.5 ffe77cdba9 feat(ci): mirror the source repository's main into a fork on every push

bf25eb2fc7 removed the sync-main job because the fork had no token that
may push .github/workflows/**: GITHUB_TOKEN cannot be granted the
workflows permission, and the bot App is installed on infinito-nexus/core
only. Since then a fork's main only moves when its owner syncs it by
hand, and the fork's main has fallen 368 commits behind.

The job is back with a token of its own: CI_SYNC_MAIN_TOKEN, a
fine-grained personal access token limited to the fork, with Contents
and Workflows write. main_from_repository.sh resolves the source through
baseline_remote.sh, so the normalization and the off switch exist once:
in infinito-nexus/core itself and with CI_SYNC_MAIN_SOURCE_REPOSITORY
disabled the job ends green without reading the secret. Everywhere else
a missing secret fails the job before any fetch or push and names the
page that explains how to create it. The token reaches git as an HTTP
header through GIT_CONFIG_* variables, never through argv or
.git/config; checkout runs without persisted credentials so its own
header does not compete.

The job runs beside run-policy, not before it: CI keeps fetching its
diff baseline from the source repository read-only, so a failed sync
turns the run red without holding CI back.

fix/ci-mirror-token tried the bot App instead (019fb572a7, 756b180f1d).
That needs the App installed on every fork and granted Workflows write,
which secrets.md rules out for the App, so the token here is a
per-fork PAT.

Checked: the script skips as infinito-nexus/core and with the sync
disabled, and fails before fetching as a fork without the secret.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-28 13:12:22 +01:00

container

…

docker

fix(cache): stop validating content types on the raw package proxies

2026-10-22 00:05:43 +02:00

git

…

github

feat(ci): mirror the source repository's main into a fork on every push

2026-10-28 13:12:22 +01:00

image

perf(ci): fold the matrix job into the image job and stream its output

2026-09-16 21:48:12 +02:00

install

fix(install): refresh dnf metadata on every retried install

2026-10-22 10:30:57 +02:00

inventory

…

lint

fix(lint): provision the mermaid browser in install-lint, not in the parallel lint run

2026-10-13 21:31:36 +02:00

make

fix(make): stop a repeated lint target from hiding its own failure

2026-09-19 07:41:01 +02:00

README.md

Script Collection

This directory contains automation scripts used across the project.

system/ contains host and system-facing helpers.
container/ contains helpers that run inside the local container.
github/ contains GitHub workflow helper scripts.
For the canonical Make target index, see make.md.
🛠️ Organize operational helpers for development, CI, release, and maintenance
🧭 Separate responsibilities into focused subdirectories with clear scope
📚 Keep script-based workflows discoverable and easier to navigate

The scope of this folder is script organization at the repository level. Detailed responsibilities belong in the README files of the respective subdirectories.