Skip to content

Fix catalog publishing for merged fork submissions - #13

Merged
flemming-n-larsen merged 1 commit into
mainfrom
fix-fork-catalog-publication
Oct 19, 2026
Merged

flemming-n-larsen merged 1 commit into
mainfrom
fix-fork-catalog-publication

Conversation

@flemming-n-larsen

Copy link
Copy Markdown
Contributor

The publisher could not add merged fork submissions to the catalog because public fork pull-request workflows receive a read-only GITHUB_TOKEN; merged bot PR #12 therefore passed validation but failed at the catalog push.

This moves publication to a trusted main push. The publisher resolves the merged PR associated with that commit, requires a successful validate check on the PR head, then regenerates the catalog from main without running submitted bot code. A workflow_dispatch recovery path republishes an already merged submission such as #12.

GOVERNANCE.md now documents the required token scopes, GitHub Actions workflow permission setting, branch-rule requirement, and maintainer approval for fork validation runs. README.md links to that guidance.

Validation: git diff --check passed, and GitHub's commit-to-PR API associates #12's merge commit with PR #12 as this workflow expects. The PR validation workflow will run on this change.

@flemming-n-larsen
flemming-n-larsen merged commit 90d44e2 into main Oct 19, 2026
1 check passed
@flemming-n-larsen
flemming-n-larsen deleted the fix-fork-catalog-publication branch October 19, 2026 19:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant