Repository navigation
docs(library): turn Helpful GitHub Actions into a Privateer scan guide - #56
Merged
Merged
Conversation
Closes REV-442 ## What/Why Mechanizer Option 1 linked to a page that only pointed at the action's README, and that README is stale (catalog 2026-02, v1.5.1, classic PATs). Participants without an AI agent had no step-by-step path to scan their repo and read the results. ## Proof it works `npm ci --ignore-scripts`, `npm run typecheck` and `npm run build` pass. The action, checkout and upload-artifact SHAs were resolved from the GitHub API today and match this site's own working osps-baseline.yaml. ## Risk Low. Content only. Two Markdown files. ## AI role Drafted by Claude Opus 5.5 from the site's working workflow, the mechanizer skill and the action README; reviewed by Jason. ## Review focus The fine-grained PAT permission list (Actions, Administration, Code scanning alerts, Contents, all read) mirrors this site's octo-sts policy but hasn't been tried as a PAT. Also the choice to keep `fail-on-error: "true"` (red job on failed controls) in the copy-paste workflow. Signed-off-by: jmeridth <jmeridth@gmail.com>
jmeridth
added
the
mark-ready-when-ready
github-actions
Bot
added
documentation
github-actions
Bot
removed
the
mark-ready-when-ready
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What/Why
The Mechanizer badge's Option 1 linked to a page that only pointed at the OSPS Baseline Action's README, which is out of date (older catalog, v1.5.1, classic tokens). This turns that section into a step-by-step guide: create a token, add a pinned workflow, run it, and read the results.
Proof it works
npm ci --ignore-scripts,npm run typecheckandnpm run buildpass. The action SHAs match this site's own workingosps-baseline.yaml.Risk
Low. Content only.
AI role
Drafted by Claude Opus 5.5 from this site's scan workflow, the
mechanizerskill and the action README. Reviewed by Jason.Review focus
The fine-grained token permissions (Actions, Administration, Code scanning alerts, Contents, all read) mirror this site's octo-sts policy but haven't been tried as a PAT. Also whether the copy-paste workflow keeps
fail-on-error: "true".