adam/open-swe
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/open-swe.git synced 2026-10-07 16:19:09 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
open-swe/docs/upstream-sync
History
Adam Moussa b51cb94bae
fix: carry workflows:write on the standing proxy token 
Complete the half-ported upstream 216cf181 cascade. The port dropped
_run_with_workflow_token from the guard but missed the paired github_app
change, so an approved .github/workflows push ran with the base token
(no workflows:write) and GitHub 403'd it.

Add workflows:write to BASE_RUNTIME_PROXY_TOKEN_PERMISSIONS and delete the
now-orphaned WORKFLOW_RUNTIME_PROXY_TOKEN_PERMISSIONS constant; update the
github_app and proxy_auth tests to match. The HITL approval gate in
workflow_push_guard.py is unchanged — this only lets the standing token
push once a human approves.
2026-07-09 14:39:21 -04:00
..
cherry-pick-hook-plan.md feat(infra): upstream-sync triage ledger, cherry-pick hooks, and git cp (#118) 2026-07-03 11:46:00 -04:00
cherry-pick-runbook.md chore: cherry-pick clean upstream fixes + cherry-pick runbook (#117) 2026-07-03 11:48:40 -04:00
triage.jsonl fix: carry workflows:write on the standing proxy token 2026-07-09 14:39:21 -04:00
triage.md fix: carry workflows:write on the standing proxy token 2026-07-09 14:39:21 -04:00