jeff/winget-submit
Watch
1
0
Fork
You've already forked winget-submit
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Commit as a built-in winget-bot instead of reading GET /user #4

Merged
jeff merged 1 commit from fixed-submitter into main 2026-10-14 01:43:41 -05:00
Conversation 0 Commits 1 Files changed 2 +13 -13
jeff commented 2026-10-14 01:43:16 -05:00
Owner
Copy link

Running tools/setup-submitter from jeff/winget-pkgs failed at minting the token with a 400. Forgejo v16 lets a token limited to particular repositories have only read/write issue and repository scopes (services/authz/access_token.go, ValidateRepositoryResource), so the read:user that GET /user needs can't be combined with the repository limit. We chose to keep the limit.

  • The action no longer calls GET /user. It commits as winget-bot <[email protected]> (the account's actual email, read through the admin API) and authenticates git as winget-bot.
  • A dry run uses that same identity.
  • The README lists two scopes, write:repository and write:issue, and says why the identity is built in.

Tests pass. Goes with the matching change to the wizard in jeff/winget-pkgs.

🤖 Generated with Claude Code

https://claude.ai/code/session_01D31MsLkM9DkCauP1EB2zgw

Running `tools/setup-submitter` from jeff/winget-pkgs failed at minting the token with a 400. Forgejo v16 lets a token limited to particular repositories have only `read`/`write` `issue` and `repository` scopes (`services/authz/access_token.go`, `ValidateRepositoryResource`), so the `read:user` that `GET /user` needs can't be combined with the repository limit. We chose to keep the limit. - The action no longer calls `GET /user`. It commits as `winget-bot <[email protected]>` (the account's actual email, read through the admin API) and authenticates git as `winget-bot`. - A dry run uses that same identity. - The README lists two scopes, `write:repository` and `write:issue`, and says why the identity is built in. Tests pass. Goes with the matching change to the wizard in jeff/winget-pkgs. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01D31MsLkM9DkCauP1EB2zgw
commit as a built-in winget-bot instead of reading GET /user
All checks were successful
test / test (push) Successful in 1m48s
Details
139d2021e6
 
The submitter's token is limited to jeff/winget-pkgs, and Forgejo lets
such a token have only repository and issue scopes, so it cannot read
its own user. The author is now winget-bot <[email protected]>,
built in like the forge and the manifest repository.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01D31MsLkM9DkCauP1EB2zgw
jeff merged commit b4c944ce76 into main 2026-10-14 01:43:41 -05:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
needs-info
Waiting on reporter for more information

  
needs-triage
Maintainer needs to evaluate this issue

  
ready-for-agent
Fully specified, ready for an AFK agent

  
ready-for-human
Requires human implementation

  
wontfix
Will not be actioned

No labels
needs-info
needs-triage
ready-for-agent
ready-for-human
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
jeff/winget-submit!4
No description provided.