Skip to content

Add missing gdlc consumers to the release App manifest entry - #55

Merged
zircote merged 1 commit into
mainfrom
chore/apps-json-add-gdlc-release-consumers
Jul 4, 2026
Merged

zircote merged 1 commit into
mainfrom
chore/apps-json-add-gdlc-release-consumers

Conversation

@zircote

@zircote zircote commented Jul 4, 2026

Copy link
Copy Markdown
Contributor

Summary

  • auth/apps.json calls itself the single source of truth for which workflow files consume each App, but two real gdlc consumers of the release App were missing: its own release.yml (pre-existing, mints the release App token for the publish step) and the newly-added live-integration-tests.yml (mints it read-only, for github-packages live verification against GET /orgs/{org}/packages).
  • Found while an independent review of gdlc PR Trivy license scan floods code scanning with accepted-license alerts (org-wide) #27 checked this manifest for consistency.

Test plan

  • Ran the exact jq validation app-manifest-validate.yml uses locally — PASS

auth/apps.json calls itself the single source of truth for which
workflow files consume each App, but two real gdlc consumers of the
release App were missing: its own release.yml (pre-existing, mints
the release App token for the publish step) and the newly-added
live-integration-tests.yml (mints it read-only, for github-packages
live verification against GET /orgs/{org}/packages).

Found while reviewing gdlc PR #27, which wires the second consumer.

Validated with the same jq check app-manifest-validate.yml runs.
Copilot AI review requested due to automatic review settings July 4, 2026 17:50

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the org GitHub App auth manifest (auth/apps.json) so it accurately reflects which workflows consume the release GitHub App, specifically adding previously-missing gdlc workflow consumers.

Changes:

  • Add gdlc/.github/workflows/release.yml to the release App’s consumers list.
  • Add gdlc/.github/workflows/live-integration-tests.yml to the release App’s consumers list.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread auth/apps.json
Comment on lines +86 to +87
"gdlc/.github/workflows/release.yml",
"gdlc/.github/workflows/live-integration-tests.yml"
Comment thread auth/apps.json
"claude-code-plugins/.github/workflows/release.yml"
"claude-code-plugins/.github/workflows/release.yml",
"gdlc/.github/workflows/release.yml",
"gdlc/.github/workflows/live-integration-tests.yml"
@zircote
zircote merged commit 8c7e2df into main Jul 4, 2026
8 checks passed
@zircote
zircote deleted the chore/apps-json-add-gdlc-release-consumers branch July 4, 2026 17:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants