fix: use GitHub App authentication for transfer permission checks #28
Conversation
The permission check now uses the worlddriven-migrate app credentials to verify if the app is installed on the source repository, rather than checking if worlddrivenbot has collaborator access. This fixes the migration flow: 1. User creates PR adding repo to REPOSITORIES.md with Origin field 2. CI runs and fails (app not installed) 3. User installs worlddriven-migrate app on their repo 4. CI reruns and passes (app detected) 5. PR merges, sync workflow transfers the repository Changes: - check-transfer-permissions.js: Add app-based auth using JWT - sync-repositories.js: Pass app credentials to permission check - drift-detection.yml: Add MIGRATE_APP_ID/PRIVATE_KEY env vars - sync-repositories.yml: Add MIGRATE_APP_ID/PRIVATE_KEY env vars Requires secrets: MIGRATE_APP_ID, MIGRATE_APP_PRIVATE_KEY
🤖 Worlddriven Status📊 Live Status Dashboard🗓️ Merge Date: 2026-01-19 at 06:38:41 UTC (today) 🎯 Want to influence when this merges?Your review matters! As a contributor to this project, your voice helps determine the merge timeline. How to review:
Your options:
💡 Pro tip: The more contributors who agree, the faster this gets merged! 📊 View detailed stats on the dashboard 📋 Recent Activity• 2026-01-18, 06:35:06 - Pull request opened This comment is automatically updated by worlddriven |
1 participant
Summary
The permission check now uses the worlddriven-migrate app credentials to verify if the app is installed on the source repository, rather than checking if worlddrivenbot has collaborator access.
This fixes the migration flow:
Changes
check-transfer-permissions.js: Add app-based auth using JWT to check app installationsync-repositories.js: Pass app credentials to permission check functiondrift-detection.yml: Add MIGRATE_APP_ID/PRIVATE_KEY env varssync-repositories.yml: Add MIGRATE_APP_ID/PRIVATE_KEY env varsRequired Secrets
MIGRATE_APP_ID- GitHub App IDMIGRATE_APP_PRIVATE_KEY- GitHub App private key (PEM format)Test Plan