Skip to content

docs: add BATON_DIRECT_COLLABORATORS_ONLY to self-hosted PAT env vars (CXP-579) #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
luisina-santos merged 2 commits into from
Jun 1, 2026
Merged

docs: add BATON_DIRECT_COLLABORATORS_ONLY to self-hosted PAT env vars (CXP-579) #20

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
f348300
docs: add BATON_DIRECT_COLLABORATORS_ONLY to self-hosted PAT env vars…
carolinaroncaglia May 27, 2026
388498a
use ci vars
luisina-santos May 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 5 additions & 6 deletions .github/workflows/ci.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,9 +5,8 @@ jobs:
runs-on: ubuntu-latest
env:
BATON_TOKEN: ${{ secrets.BATON_TOKEN }}
BATON_ENTERPRISES: mevans-test
BATON_ORGS: mevans-test-org1
BATON_INSTANCE_URL: https://github.com
BATON_ORGS: ${{ vars.BATON_ORGS }}
BATON_INSTANCE_URL: ${{ vars.BATON_INSTANCE_URL }}
steps:
- name: Checkout code
uses: actions/checkout@v4
Expand All @@ -21,6 +20,6 @@ jobs:
uses: ConductorOne/github-workflows/actions/sync-test@v2
with:
connector: ./baton-github-enterprise
baton-entitlement: 'org_role:8132:assigned'
baton-principal: '268751836'
baton-principal-type: 'user'
baton-entitlement: ${{ vars.ENTITLEMENT_ID }}
baton-principal: ${{ vars.PRINCIPAL_ID }}
baton-principal-type: ${{ vars.PRINCIPAL_TYPE }}
3 changes: 2 additions & 1 deletion docs/connector.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -313,6 +313,7 @@ baton-github-enterprise
| `BATON_ORGS` | Comma-separated list of organizations to sync. If not set, all organizations are synced. |
| `BATON_ENTERPRISES` | Comma-separated list of enterprises to sync enterprise roles for. |
| `BATON_OMIT_ARCHIVED_REPOSITORIES` | Set to `true` to exclude archived repositories from syncs. |
| `BATON_DIRECT_COLLABORATORS_ONLY` | Set to `true` to optimize sync for large organizations by reducing API calls (uses grant expansion for team-based repo access and skips per-team detail fetches). |
| `BATON_PROVISIONING` | Set to `true` to enable provisioning and deprovisioning. |
| `BATON_SYNC_SECRETS` | Set to `true` to sync secrets (API keys). |
</Step>
Expand Down Expand Up @@ -385,4 +386,4 @@ If you see this error during sync, it most commonly means the GitHub App is miss

This permission is required because the connector queries GitHub's GraphQL API to check whether your organization has SAML/SSO configured. GitHub restricts this data to apps with organization admin read access. Without it, the sync will fail.

**To fix:** Go to your GitHub App settings, then navigate to **Permissions** > **Organization permissions** > **Administration** and set it to **Read-only**.
**To fix:** Go to your GitHub App settings, then navigate to **Permissions** > **Organization permissions** > **Administration** and set it to **Read-only**.
Loading