docs: techspark user webhook (id=6) + org-webhook note + cleanup token
Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
@@ -112,7 +112,10 @@ PY
|
|||||||
# 3. revoke the one-time token (Gitea admin UI → Users → masi → Access Tokens).
|
# 3. revoke the one-time token (Gitea admin UI → Users → masi → Access Tokens).
|
||||||
```
|
```
|
||||||
|
|
||||||
Owners already covered: `gitea_admin` (webhook id=4), `masi` (webhook id=5).
|
Owners already covered: `gitea_admin` (webhook id=4), `masi` (webhook id=5),
|
||||||
|
`techspark` (webhook id=6 — a user account, not an org; covers `techspark/suaspark-site`,
|
||||||
|
`techspark/spark-ui`, etc.). True **orgs** need org-level webhooks
|
||||||
|
(`POST /orgs/{org}/hooks`, requires a token with `write:organization`).
|
||||||
|
|
||||||
## Gitea SSRF allow-list (required, one-time)
|
## Gitea SSRF allow-list (required, one-time)
|
||||||
|
|
||||||
@@ -192,5 +195,6 @@ name prefix `pragent-`:
|
|||||||
`pragent-userhook-test-2026`, `pragent-payload-look-2026`,
|
`pragent-userhook-test-2026`, `pragent-payload-look-2026`,
|
||||||
`pragent-cleanup-2026`, `pragent-cleanup2-2026`, `pragent-cleanup3-2026`.
|
`pragent-cleanup-2026`, `pragent-cleanup2-2026`, `pragent-cleanup3-2026`.
|
||||||
- `masi`: `pragent-userhook-masi-2026`.
|
- `masi`: `pragent-userhook-masi-2026`.
|
||||||
|
- `techspark`: `pragent-userhook-techspark-2026`.
|
||||||
|
|
||||||
(Keep `pragent-bot`'s `pragent-ci` token — that's the live reviewer credential.)
|
(Keep `pragent-bot`'s `pragent-ci` token — that's the live reviewer credential.)
|
||||||
Reference in New Issue
Block a user