mirror of
https://github.com/fabro-sh/fabro.git
synced 2026-08-28 05:27:41 +00:00
7de3b409ed
Fabro can mint a scoped sandbox GITHUB_TOKEN via [run.integrations.github.permissions], but apps registered through the manifest flow could not grant packages = "read" because the manifest never requested it. Add Packages (read-only) so freshly registered apps can download private GitHub Packages (for example npm registry dependencies) inside sandboxes, mirroring how GitHub Actions workflows use their built-in GITHUB_TOKEN for registry reads. Existing apps still need the permission added manually in the app's settings, as the docs already describe. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| src | ||
| tests | ||
| build.rs | ||
| Cargo.toml | ||