Sign in

Search issue titles and bodies, change requests and comments. Private repositories you cannot read are not included.

vole
Clone

Read only, no credentials:

https://rodent.software/vole.git

Write over SSH with a registered key:

git clone ssh://git@rodent.software:2222/vole.git

A free and open-source forge that lives in your Git repo.

Say who can start a job through assignment

f24c4142530d83b5725495db874729d562da0a56 · Keenan Nemetz · 6d ago · parent 2bc0ae74

Say who can start a job through assignment

The agent example said to rely on assignment because it "requires triage", but
triage includes the issue's own author, so any contributor can assign their own
issue. The page now says assignment needs the same author filter as a comment.

Part of #138.

docs/workflows.md +5−3

@@ -160,9 +160,11 @@ not start it again. Mentions inside code samples are ignored. See
160 160 for the exact rules.
161 161
162 162 A comment body is still untrusted text. If the job can write — comment, push a
163 branch, or open a change — use `author.role: maintain` or `author.name` to limit who can
164 start it, or rely on assignment, which requires triage. Read the agent's
165 instructions from the repository, never from the event body.
163 branch, or open a change — use `author.role: maintain` or `author.name` to limit who
164 can start it. Assignment is not a substitute for that filter: whoever opened an
165 issue may assign it, so `assigned-to` alone lets a contributor whose issue it is
166 start the job. Combine the two when only a maintainer should be able to ask. Read
167 the agent's instructions from the repository, never from the event body.
166 168
167 169 ## Manual runs
168 170