docs: techspark user webhook (id=6) + org-webhook note + cleanup token

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Marcos
2026-08-17 20:38:14 +00:00
parent 90cea84f6f
commit 8758b22802
+5 -1
View File
@@ -112,7 +112,10 @@ PY
# 3. revoke the one-time token (Gitea admin UI → Users → masi → Access Tokens). # 3. revoke the one-time token (Gitea admin UI → Users → masi → Access Tokens).
``` ```
Owners already covered: `gitea_admin` (webhook id=4), `masi` (webhook id=5). Owners already covered: `gitea_admin` (webhook id=4), `masi` (webhook id=5),
`techspark` (webhook id=6 — a user account, not an org; covers `techspark/suaspark-site`,
`techspark/spark-ui`, etc.). True **orgs** need org-level webhooks
(`POST /orgs/{org}/hooks`, requires a token with `write:organization`).
## Gitea SSRF allow-list (required, one-time) ## Gitea SSRF allow-list (required, one-time)
@@ -192,5 +195,6 @@ name prefix `pragent-`:
`pragent-userhook-test-2026`, `pragent-payload-look-2026`, `pragent-userhook-test-2026`, `pragent-payload-look-2026`,
`pragent-cleanup-2026`, `pragent-cleanup2-2026`, `pragent-cleanup3-2026`. `pragent-cleanup-2026`, `pragent-cleanup2-2026`, `pragent-cleanup3-2026`.
- `masi`: `pragent-userhook-masi-2026`. - `masi`: `pragent-userhook-masi-2026`.
- `techspark`: `pragent-userhook-techspark-2026`.
(Keep `pragent-bot`'s `pragent-ci` token — that's the live reviewer credential.) (Keep `pragent-bot`'s `pragent-ci` token — that's the live reviewer credential.)