Skip to content

Add scheduled dashboard team sync#266

Open
nuclearcat wants to merge 1 commit into
kernelci:mainfrom
nuclearcat:dashboard-sync
Open

Add scheduled dashboard team sync#266
nuclearcat wants to merge 1 commit into
kernelci:mainfrom
nuclearcat:dashboard-sync

Conversation

@nuclearcat

Copy link
Copy Markdown
Member

Add a GitHub Actions workflow and Python helper to reconcile the kernelci/dashboard team from the dashboard developers list. The workflow defaults to dry-run, requires an explicit apply mode or SYNC_APPLY for scheduled writes, and keeps removal limits in place.

Use a dedicated KCIORG_TOKEN secret and environment variable for the org-scoped PAT so it does not collide with generic GitHub tooling tokens. Disable persisted checkout credentials so the default GITHUB_TOKEN is not left in the checked-out sources.

Add a GitHub Actions workflow and Python helper to reconcile the kernelci/dashboard team from the dashboard developers list. The workflow defaults to dry-run, requires an explicit apply mode or SYNC_APPLY for scheduled writes, and keeps removal limits in place.

Use a dedicated KCIORG_TOKEN secret and environment variable for the org-scoped PAT so it does not collide with generic GitHub tooling tokens. Disable persisted checkout credentials so the default GITHUB_TOKEN is not left in the checked-out sources.

Signed-off-by: Denys Fedoryshchenko <denys.f@collabora.com>
@tales-aparecida

Copy link
Copy Markdown

Is there a requirement to not use dependencies? I feel like some of the code is boilerplate which could be avoided by using responses, but I kinda like it anyway

@nuclearcat

Copy link
Copy Markdown
Member Author

Is there a requirement to not use dependencies? I feel like some of the code is boilerplate which could be avoided by using responses, but I kinda like it anyway

I am kind of extra careful due recent wave of supply chain attacks and this key have very high privileges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants