Chris Farhood
f3f3806f60
Four roles with scoped permissions enforcing PR workflow at GitHub level: - CEO: merge authority, org admin - CTO: PR review/approval, full engineering + workflows - QA: PR review/approval, read-only contents, CI monitoring - Engineer: push branches, open PRs, CI execution Apps are org-scoped. PEM naming: <org>-<role>.pem Branch protection rulesets to be configured after app creation. Co-Authored-By: Paperclip <noreply@paperclip.ing>
18 lines
505 B
JSON
18 lines
505 B
JSON
{
|
|
"name": "privilegedescalation-qa",
|
|
"url": "https://github.com/privilegedescalation",
|
|
"hook_attributes": {
|
|
"url": "https://example.com/placeholder"
|
|
},
|
|
"redirect_url": "https://github.com/privilegedescalation",
|
|
"public": false,
|
|
"default_permissions": {
|
|
"contents": "read",
|
|
"issues": "write",
|
|
"pull_requests": "write",
|
|
"actions": "read",
|
|
"metadata": "read"
|
|
},
|
|
"default_events": [],
|
|
"description": "QA agent \u2014 PR review/approval, bug filing, CI monitoring"
|
|
} |