Skip to content

fix(github): enforce installation boundary - #28

Merged
realmroot[bot] merged 5 commits into
mainfrom
codex/github-cross-fork-pr
Aug 14, 2026
Merged

fix(github): enforce installation boundary#28
realmroot[bot] merged 5 commits into
mainfrom
codex/github-cross-fork-pr

Conversation

@realmroot

@realmroot realmroot Bot commented Aug 14, 2026

Copy link
Copy Markdown
Contributor

Summary

  • remove the unsupported delegated-user cross-fork PR implementation
  • keep all GitHub operations inside the selected GitHub App installation
  • reject external target repositories before requesting a write credential
  • document and test the boundary explicitly

Production acceptance

  1. Use the saltbo GitHub context.
  2. Run gh pr create from saltbo:codex/oidc to miantiao-me/Sink through Realmroot.
  3. Confirm the Adapter returns 403 with: The target repository must belong to the selected GitHub App installation.
  4. Confirm no reconnect, permission-upgrade, or OAuth flow is started.

Verified on production Worker version e73e58f6-b45a-47eb-b2d4-4b1d88dc6424.


🤖 Created by Jarvis via Realmroot

@realmroot
realmroot Bot requested a review from saltbo as a code owner August 14, 2026 20:49
@realmroot realmroot Bot changed the title fix(github): support cross-fork pull request creation fix(github): enforce installation boundary Aug 14, 2026
@realmroot
realmroot Bot merged commit 95f721a into main Aug 14, 2026
2 checks passed
@realmroot
realmroot Bot deleted the codex/github-cross-fork-pr branch August 14, 2026 21:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant