From 8758b228022ec9aed4442d940b252c5f4a592f29 Mon Sep 17 00:00:00 2001 From: Marcos Date: Mon, 17 Aug 2026 20:38:14 +0000 Subject: [PATCH] docs: techspark user webhook (id=6) + org-webhook note + cleanup token Co-Authored-By: Claude --- pilot/README-webhook.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/pilot/README-webhook.md b/pilot/README-webhook.md index 1239067..619eded 100644 --- a/pilot/README-webhook.md +++ b/pilot/README-webhook.md @@ -112,7 +112,10 @@ PY # 3. revoke the one-time token (Gitea admin UI → Users → masi → Access Tokens). ``` -Owners already covered: `gitea_admin` (webhook id=4), `masi` (webhook id=5). +Owners already covered: `gitea_admin` (webhook id=4), `masi` (webhook id=5), +`techspark` (webhook id=6 — a user account, not an org; covers `techspark/suaspark-site`, +`techspark/spark-ui`, etc.). True **orgs** need org-level webhooks +(`POST /orgs/{org}/hooks`, requires a token with `write:organization`). ## Gitea SSRF allow-list (required, one-time) @@ -192,5 +195,6 @@ name prefix `pragent-`: `pragent-userhook-test-2026`, `pragent-payload-look-2026`, `pragent-cleanup-2026`, `pragent-cleanup2-2026`, `pragent-cleanup3-2026`. - `masi`: `pragent-userhook-masi-2026`. +- `techspark`: `pragent-userhook-techspark-2026`. (Keep `pragent-bot`'s `pragent-ci` token — that's the live reviewer credential.) \ No newline at end of file