admin: GitHub App control-plane lane (ghapp/repo-admin)#81

Open

primeinc wants to merge 36 commits into

mainfrom

ghapp/repo-admin

Commits on May 11, 2026

admin: add protect-next ruleset spec
primeinc
committed
admin: add protect-main-release-only ruleset spec
primeinc
committed
admin: set github app as sole next ruleset bypass actor
primeinc
committed
admin: remove hardcoded app bypass actor from next ruleset spec
primeinc
committed
admin: add main release branch guard
primeinc
committed
admin: add github app ruleset check and upsert workflow
primeinc
committed
admin: add DoNotMergeYet pull request gate
primeinc
committed
ci: run gate checks for next branch
primeinc
committed
ci: run web gate for next branch
primeinc
committed
admin: require DoNotMergeYet label gate on next
primeinc
committed
admin: require DoNotMergeYet label gate on main
primeinc
committed
admin: harden ruleset workflow lookups and dispatch guard
primeinc
committed
admin: add GitHub API next sync workflow
primeinc
committed
admin: require explicit approval gate for ruleset upsert
primeinc
committed
admin: add repository code owners
primeinc
committed
admin: require code owner review on next ruleset
primeinc
committed
admin: require code owner review on main ruleset
primeinc
committed
admin: protection-stage rework — drop CODEOWNERS, native bypass, behind-main + auto-sync

primeinc
and
claude
committed
admin: pin ghapp/repo-admin as the canonical control-plane lane

primeinc
and
claude
committed
admin: address PR #81 review comments — FF semantics, FD3 stderr, generic msgs

primeinc
and
claude
committed
admin: split 00e into check + upsert jobs (Copilot review on 00e:36)

primeinc
and
claude
committed
admin: 00g-verify-app-credentials.yml — one-shot diagnostic to prove vars.GH_APP_ID + secrets.GH_APP_PRIVATE_KEY match the installed App

primeinc
and
claude
committed
admin: drop refs/heads/main guard from 00g — diagnostic is read-only
primeinc
committed
admin: fold App-creds verification into 00d, delete 00g
primeinc
committed
admin: rename workflow + job names for text-message-style UI clarity

primeinc
and
claude
committed
admin: rename Lane Check -> Branch Source / Allowed into main
primeinc
committed
admin: rename to Protected Branch / Src branch allowed (UI dispo)
primeinc
committed
admin: split admin-lane guard into 3 checks with dependency-surface slugs

primeinc
and
claude
committed
admin: workflow-triggers doctrine + concurrency on all 10 protection workflows

primeinc
and
claude
committed
admin: fix 00e bootstrap deadlock + 00f next FF parity

primeinc
and
claude
committed
admin: 00e self-bootstraps on push to main; drop empty environment ref

primeinc
and
claude
committed
admin: PR #81 review — env gate, read-only check, install probe, doc fixes

Copilot
and
primeinc
authored
admin: fix 00i install probe — installation token can't call /repos/{}/installation

Copilot
and
primeinc
authored
Update protect-main-release-only.json

primeinc
and
gemini-code-assist[bot]
authored
Update protect-next.json

primeinc
and
gemini-code-assist[bot]
authored
admin: address PR #81 bot reviews — URL-encode lanes, line numbers, doc drift

primeinc
and
claude
committed