Skip to content

Check repository settings for drift every week - #8

Merged
KOliver94 merged 1 commit into
mainfrom
settings-drift
Oct 19, 2026
Merged

KOliver94 merged 1 commit into
mainfrom
settings-drift

Conversation

@KOliver94

Copy link
Copy Markdown
Member

Repository settings must not drift from settings/baseline.json unnoticed. A scheduled workflow runs scripts/apply-settings.mjs --dry-run every Monday and fails on any difference.

It reads the repositories with a short-lived token from the "BSStudio settings check" GitHub App, which has only Administration: read, is installed only on the repositories in settings/repos.json, and gets its token scoped to that list. The App cannot change anything; fixing drift stays a local run of the script.

@KOliver94
KOliver94 merged commit 45324b3 into main Oct 19, 2026
6 checks passed
@KOliver94
KOliver94 deleted the settings-drift branch October 19, 2026 22:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant