Skip to content

fix: allow same-repo PRs through github-guard - #15

Merged
coreybutler merged 1 commit into
mainfrom
fix/github-guard-same-repo
Oct 24, 2026
Merged

coreybutler merged 1 commit into
mainfrom
fix/github-guard-same-repo

Conversation

@coreybutler

Copy link
Copy Markdown
Contributor

Summary

  • Previous guard trusted author_association=MEMBER, but GitHub reports coreybutler as CONTRIBUTOR when org membership is private. Team API still 404s on GITHUB_TOKEN.
  • Same-repo PRs now pass (pushing the branch already requires write). Forks still need core team membership or ORG_READ_TOKEN.

Test plan

  • This PR''s Guard Sensitive Changes job is green
  • test (nvm) stays green

Private org membership reports author_association=CONTRIBUTOR even for the
org owner, so the previous MEMBER check still failed.
@coreybutler
coreybutler merged commit f088eb9 into main Oct 24, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant