docs: techspark user webhook (id=6) + org-webhook note + cleanup token
Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
@@ -112,7 +112,10 @@ PY
|
||||
# 3. revoke the one-time token (Gitea admin UI → Users → masi → Access Tokens).
|
||||
```
|
||||
|
||||
Owners already covered: `gitea_admin` (webhook id=4), `masi` (webhook id=5).
|
||||
Owners already covered: `gitea_admin` (webhook id=4), `masi` (webhook id=5),
|
||||
`techspark` (webhook id=6 — a user account, not an org; covers `techspark/suaspark-site`,
|
||||
`techspark/spark-ui`, etc.). True **orgs** need org-level webhooks
|
||||
(`POST /orgs/{org}/hooks`, requires a token with `write:organization`).
|
||||
|
||||
## Gitea SSRF allow-list (required, one-time)
|
||||
|
||||
@@ -192,5 +195,6 @@ name prefix `pragent-`:
|
||||
`pragent-userhook-test-2026`, `pragent-payload-look-2026`,
|
||||
`pragent-cleanup-2026`, `pragent-cleanup2-2026`, `pragent-cleanup3-2026`.
|
||||
- `masi`: `pragent-userhook-masi-2026`.
|
||||
- `techspark`: `pragent-userhook-techspark-2026`.
|
||||
|
||||
(Keep `pragent-bot`'s `pragent-ci` token — that's the live reviewer credential.)
|
||||
Reference in New Issue
Block a user