diff --git a/pilot/README-webhook.md b/pilot/README-webhook.md index 1239067..619eded 100644 --- a/pilot/README-webhook.md +++ b/pilot/README-webhook.md @@ -112,7 +112,10 @@ PY # 3. revoke the one-time token (Gitea admin UI → Users → masi → Access Tokens). ``` -Owners already covered: `gitea_admin` (webhook id=4), `masi` (webhook id=5). +Owners already covered: `gitea_admin` (webhook id=4), `masi` (webhook id=5), +`techspark` (webhook id=6 — a user account, not an org; covers `techspark/suaspark-site`, +`techspark/spark-ui`, etc.). True **orgs** need org-level webhooks +(`POST /orgs/{org}/hooks`, requires a token with `write:organization`). ## Gitea SSRF allow-list (required, one-time) @@ -192,5 +195,6 @@ name prefix `pragent-`: `pragent-userhook-test-2026`, `pragent-payload-look-2026`, `pragent-cleanup-2026`, `pragent-cleanup2-2026`, `pragent-cleanup3-2026`. - `masi`: `pragent-userhook-masi-2026`. +- `techspark`: `pragent-userhook-techspark-2026`. (Keep `pragent-bot`'s `pragent-ci` token — that's the live reviewer credential.) \ No newline at end of file