Repository navigation

fix(ci): add pr-review.yml to .prettierignore and use GH_PAT_WORKFLOWS for autofix pushes - #627

Open

don-petry wants to merge 19 commits into

mainfrom

fix/ci-autofix-token-and-prettierignore

Open

fix(ci): add pr-review.yml to .prettierignore and use GH_PAT_WORKFLOWS for autofix pushes#627
don-petry wants to merge 19 commits into
mainfrom
fix/ci-autofix-token-and-prettierignore

Commits on Oct 13, 2026
- fix(ci): add pr-review.yml to .prettierignore and use GH_PAT_WORKFLOWS for autofix
  don-petry
  committed
  2f925e8
- fix(ci): isolate GH_PAT_WORKFLOWS to push step to prevent credential exfiltration during npm ci
  don-petry
  committed
  960d907
- fix(ci): prevent branch name injection in git push with token
  
  don-petry
  and
  claude
  committed
  2d50290
- fix(ci): do not persist checkout credentials in autofix job
  
  don-petry
  and
  claude
  committed
  a2c9835
- fix(reviews): push autofix from a clean checkout job so PR hooks never see the token
  
  don-petry
  and
  claude
  committed
  2478e66
- fix(reviews): pass autofix patch via artifact instead of job output
  don-petry
  committed
  1976d10
- fix(reviews): require GH_PAT_WORKFLOWS for autofix push
  
  don-petry
  and
  claude
  committed
  770c369
Commits on Oct 14, 2026
Commits on Oct 16, 2026
- Merge branch 'main' into fix/ci-autofix-token-and-prettierignore
  don-petry
  authored
  8685d28
Commits on Oct 21, 2026
- Merge branch 'main' into fix/ci-autofix-token-and-prettierignore
  don-petry
  authored
  d7f4068
Commits on Oct 23, 2026
Commits on Oct 24, 2026
- fix(ci): verify staged autofix tree before upload and guard against stale branch head
  rachel-petry
  committed
  2757d3b
- fix(ci): reduce autofix-push GITHUB_TOKEN permission to contents: read
  rachel-petry
  committed
  51780d2
Commits on Oct 25, 2026
- Merge branch 'main' into fix/ci-autofix-token-and-prettierignore
  don-petry
  authored
  ed8bea7

Navigation Menu

Repository navigation

fix(ci): add pr-review.yml to .prettierignore and use GH_PAT_WORKFLOWS for autofix pushes - #627

fix(ci): add pr-review.yml to .prettierignore and use GH_PAT_WORKFLOWS for autofix pushes#627
don-petry wants to merge 19 commits into
mainfrom
fix/ci-autofix-token-and-prettierignore

Commits on Oct 13, 2026

fix(ci): add pr-review.yml to .prettierignore and use GH_PAT_WORKFLOWS for autofix

fix(ci): isolate GH_PAT_WORKFLOWS to push step to prevent credential exfiltration during npm ci

fix(ci): prevent branch name injection in git push with token

fix(ci): do not persist checkout credentials in autofix job

fix(reviews): push autofix from a clean checkout job so PR hooks never see the token

fix(reviews): pass autofix patch via artifact instead of job output

fix(reviews): require GH_PAT_WORKFLOWS for autofix push

Commits on Oct 14, 2026

Merge main (org renamed to combsmith) into fix/ci-autofix-token-and-prettierignore

Merge branch 'main' into fix/ci-autofix-token-and-prettierignore

Merge branch 'main' into fix/ci-autofix-token-and-prettierignore

Merge branch 'main' into fix/ci-autofix-token-and-prettierignore

Commits on Oct 16, 2026

Merge branch 'main' into fix/ci-autofix-token-and-prettierignore

Commits on Oct 21, 2026

Merge branch 'main' into fix/ci-autofix-token-and-prettierignore

Commits on Oct 23, 2026

Merge branch 'main' into fix/ci-autofix-token-and-prettierignore

fix(ci): restrict autofix patch to non-workflow tracked files and prefer GH_PAT_DON_PETRY

fix(ci): harden autofix workflow-path guard with NUL-delimited checks

Commits on Oct 24, 2026

fix(ci): verify staged autofix tree before upload and guard against stale branch head

fix(ci): reduce autofix-push GITHUB_TOKEN permission to contents: read

Commits on Oct 25, 2026

Merge branch 'main' into fix/ci-autofix-token-and-prettierignore