Skip to content

feat(igdb): push game-details refresh as Karen via app token#24

Merged
lallaria merged 2 commits into
mainfrom
feat/oliver-pushes-game-details
Jun 10, 2026
Merged

feat(igdb): push game-details refresh as Karen via app token#24
lallaria merged 2 commits into
mainfrom
feat/oliver-pushes-game-details

Conversation

@lallaria

@lallaria lallaria commented Jun 10, 2026

Copy link
Copy Markdown
Contributor

The game-details scan now works end to end (run 27294327085 fetched all 226 worlds), but the commit-back step pushes to main as github-actions[bot], which the main-protection ruleset rejects (PR-only, required checks, verified signatures).

This switches the push to Karen's installation token — she is the only app installation with contents: write (Oliver is contents: read), and she already uses it to push the igdb-pr-* tags:

  • mint a token with the same actions/create-github-app-token@v3 step as karen-pr-review.yml, reusing the existing vars.KAREN_APP_ID / secrets.KAREN_PRIVATE_KEYno new credentials needed
  • pass it to actions/checkout so the persisted push credential is Karen's
  • commit as karen-head-of-multiworld-qa[bot]

Required setup before merge takes effect

  1. main-protection ruleset: add bypass actor → app Karen Head of Multiworld QA, bypass mode Always

🤖 Generated with Claude Code

lallaria and others added 2 commits June 10, 2026 14:54
The commit-back step pushed to main as github-actions[bot], which the
main-protection ruleset rejects (PR-only, required checks, verified
signatures). Mint an installation token for Oliver, check out with it,
and commit as Oliver's bot identity; Oliver is a bypass actor on
main-protection, matching the scoped-app-bypass pattern already used by
igdb_tagging (Karen) and automated_indexing.

Requires OLIVER_APP_ID / OLIVER_PRIVATE_KEY as igdb_env environment
secrets and Oliver added as a main-protection bypass actor.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Oliver's installation only has contents:read; Karen has contents:write
(she already pushes the igdb-pr-* tags). Reuses the existing
KAREN_APP_ID var / KAREN_PRIVATE_KEY secret and the same v3 mint step
as karen-pr-review.yml, so no new credentials are needed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@lallaria lallaria changed the title feat(igdb): push game-details refresh as Oliver via app token feat(igdb): push game-details refresh as Karen via app token Jun 10, 2026
@lallaria lallaria merged commit 4c02671 into main Jun 10, 2026
@lallaria lallaria deleted the feat/oliver-pushes-game-details branch June 10, 2026 22:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant