Skip to content

ci(ipr): use adcp's reusable callable workflow + GitHub App#276

Merged
bokelley merged 1 commit intomainfrom
bokelley/ipr-callable
Apr 25, 2026
Merged

ci(ipr): use adcp's reusable callable workflow + GitHub App#276
bokelley merged 1 commit intomainfrom
bokelley/ipr-callable

Conversation

@bokelley
Copy link
Copy Markdown
Contributor

Summary

Replaces the IPR signing workflow with a delegation to the reusable workflow at adcontextprotocol/adcp/.github/workflows/ipr-check-callable.yml (landed via adcontextprotocol/adcp#3134).

Same change as adcp-client#985, already merged + canary-verified.

What changes

  • Cross-repo signature writes use a GitHub App installation token (short-lived, org-scoped to adcontextprotocol/adcp only) instead of a long-lived PAT
  • PR author's GitHub identity is the signing fact, not commit-author email — same fix from adcontextprotocol/adcp#3011
  • Workflow shrinks to a 22-line caller stub

Pre-requisites

  • AAO IPR Bot installed on this repo
  • IPR_APP_ID and IPR_APP_PRIVATE_KEY org secrets accessible

🤖 Generated with Claude Code

Replaces the existing contributor-assistant pattern (or adds the IPR
workflow where missing) with a delegation to the new reusable
workflow at adcontextprotocol/adcp/.github/workflows/ipr-check-callable.yml.

Cross-repo signature writes use a GitHub App installation token
(short-lived, org-scoped to adcp only) instead of a long-lived PAT.
PR author's GitHub identity is the signing fact — same fix from
adcontextprotocol/adcp#3011.

Same change as adcp-client#985.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@bokelley bokelley merged commit 74d7c23 into main Apr 25, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant