Skip to content

feat: add Base Std docs sync receiver - #1828

Open
soheimam wants to merge 1 commit into
masterfrom
feat/base-std-docs-sync-receiver
Open

feat: add Base Std docs sync receiver#1828
soheimam wants to merge 1 commit into
masterfrom
feat/base-std-docs-sync-receiver

Conversation

@soheimam

Copy link
Copy Markdown
Contributor

Summary

  • add the repository-dispatch receiver that verifies Base Std provenance and opens scoped docs pull requests
  • add the isolated Node 22 sync runtime, OIDC verifier, route table, and security-focused test suite
  • keep routing fixtures in memory so the routing test never writes to or removes the repository’s docs/ directory

Validation

  • npm ci --prefix scripts --no-audit --no-fund
  • npm --prefix scripts run test:base-std-sync
  • node --check scripts/verify-oidc.mjs
  • bash -n scripts/lib/workflow-fail.sh
  • git diff --check

Deployment follow-up

No credentials are included in this PR. Before installing the Base Std dispatcher, configure the Base Docs Actions secrets and variables from the installation guide, enable GitHub Actions pull-request creation, and set ALLOWED_SENDER_BINDINGS to the account that owns the Base Std dispatcher PAT.

@cb-heimdall

Copy link
Copy Markdown
Collaborator

🟡 Heimdall Review Status

Requirement Status More Info
Reviews 🟡 0/1
Denominator calculation
Show calculation
1 if user is bot 0
1 if user is external 0
2 if repo is sensitive 0
From .codeflow.yml 1
Additional review requirements
Show calculation
Max 0
0
From CODEOWNERS 0
Global minimum 0
Max 1
1
1 if commit is unverified 0
Sum 1

"<untrusted_changed_api_surface>",
"<untrusted_candidate_pages>",
]) {
assert.match(SECURITY_SYSTEM_PROMPT, new RegExp(tag.replace(/[<>]/g, "\\$&")));
lines.push(` source-tag: ${payload.tag}`);
lines.push(` source-commit: https://github.com/${source}/commit/${payload.sha}`);
} else if (kind === "manual-update") {
lines.push(` intent: ${(payload.intent || "").replace(/-->|<!--/g, "").slice(0, 280)}`);
lines.push(` source-tag: ${payload.tag}`);
lines.push(` source-commit: https://github.com/${source}/commit/${payload.sha}`);
} else if (kind === "manual-update") {
lines.push(` intent: ${(payload.intent || "").replace(/-->|<!--/g, "").slice(0, 280)}`);
} else if (kind === "manual-update") {
lines.push(` intent: ${(payload.intent || "").replace(/-->|<!--/g, "").slice(0, 280)}`);
for (const ref of payload.source_refs || []) {
lines.push(` source-ref: ${String(ref).replace(/-->|<!--/g, "")}`);
} else if (kind === "manual-update") {
lines.push(` intent: ${(payload.intent || "").replace(/-->|<!--/g, "").slice(0, 280)}`);
for (const ref of payload.source_refs || []) {
lines.push(` source-ref: ${String(ref).replace(/-->|<!--/g, "")}`);
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants