Bart Smykla 14ea6d0f59 ci(ksai): start a KSAI run only for people who can write to the repository (#10578) ...

* ci(ksai): start a KSAI run only for people who can write to the repository

A comment or review now starts the KSAI run job only when its author
can write to this repository. A new authorize job reads the author's
permission with the workflow token, and the run job needs it. A
dispatched run starts as before.

Signed-off-by: Bart Smykla <bartek@smykla.com>

* ci(ksai): fail the authorize step when the permission read fails

A failed permission read used to answer writes=false with a green
job, so a writer's comment started nothing and the log said nothing.
The step now fails on a read error, the run job still does not start,
and the log names the error. An author who cannot write still reads
as writes=false.

Signed-off-by: Bart Smykla <bartek@smykla.com>

---------

Signed-off-by: Bart Smykla <bartek@smykla.com>

2026-10-09 07:04:27 +08:00

..

ISSUE_TEMPLATE

Full-prettier-run (#8605)

2025-04-11 13:37:19 +02:00

scripts

fix(release): resolve previous tag by semver precedence (#10408)

2026-08-18 10:42:06 +08:00

workflows

ci(ksai): start a KSAI run only for people who can write to the repository (#10578)

2026-10-09 07:04:27 +08:00

config.yml

Rename getinsomnia > kong

2019-12-17 12:16:08 -05:00

PULL_REQUEST_TEMPLATE.md

Update PR template (#4318)

2021-12-17 07:51:51 -08:00