Repository navigation
CI: re-sync the label workflows to the template (github.token) - #37
Conversation
labels.yml and label-triage.yml now match hyperpolymath/rsr-template-repo: GH_TOKEN reads github.token instead of secrets.GITHUB_TOKEN (the same token), the runner is pinned to ubuntu-24.04, and each job has timeout-minutes: 10. Neither workflow gains a uses: step, so actions.lock is unchanged. This clears Hypatia RE001 on both files under the current rule, as hyperpolymath/echo-types#354 did there. RE001 on push-email-notify.yml stays: under standards ADR-009 it is cleared by an (egress …) entry in a repo deed, and this repository has no <repo>_chora.deed yet. Checks: scripts/check-repository.mjs passes; RE001 run locally, 3 findings before (old rule), 1 after (push-email-notify only). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J4QvDithtn5Xk5MbSPm4Px
|
No actionable comments were generated in the recent review.
 |
| Layer / File(s) | Summary |
|---|---|
Runner, timeout, and token settings .github/workflows/label-triage.yml, .github/workflows/labels.yml |
The triage and sync jobs use ubuntu-24.04, set a 10-minute timeout, and use github.token instead of secrets.GITHUB_TOKEN for GH_TOKEN. |
Priority:
Estimated code review effort: 1 (Trivial) | ~5 minutes
Change: Other
Merge Risk: 
a9135
-
The workflow updates are mergeable; no actionable current-head risk was identified.
Pre-merge checks: 
-
Check name Status Explanation Description Check Check skipped - CodeRabbit’s high-level summary is enabled. Title check The title clearly identifies the main change: re-synchronizing the label workflows and updating the token reference. It is concise and related to the changeset. Linked Issues check Check skipped because no linked issues were found for this pull request. Out of Scope Changes check Check skipped because no linked issues were found for this pull request.
- Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.
Comment @coderabbitai help to get the list of available commands.
|
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
Add Carrot credits or activate Agent usage billing to use Autofix |
Summary
This re-syncs
labels.ymlandlabel-triage.ymlto the hyperpolymath/rsr-template-repo versions, as hyperpolymath/echo-types#354 did in echo-types. It is part of the estate-wide RE001 / harden-runner decision: metadatastician/standards#1352 (ADR-009), hyperpolymath/hypatia#964 and the template PR.Changes
GH_TOKEN: ${{ github.token }}replaces${{ secrets.GITHUB_TOKEN }}. It is the same token.ubuntu-24.04, and each job getstimeout-minutes: 10.uses:step, soactions.lockis unchanged.Testing
node scripts/check-repository.mjspasses.push-email-notify.yml, which genuinely needs the SMTP secrets. Under ADR-009 it is cleared by an(egress …)entry in a repo deed. This repository has no<repo>_chora.deedyet, so clearing it means minting a deed first, which is out of scope here.Generated by Claude Code
Summary by CodeRabbit