Restrict Skills WG admin access to WG leads (#190)
Some checks failed
Deploy / Deploy to Production (push) Has been cancelled

* Limit Skills WG repository admin access to WG leads

* Retain explicit core-maintainer admin access per review
This commit is contained in:
Sambhav Kothari 2026-09-17 13:08:56 +02:00 • committed by GitHub
commit 317165ed48
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 12 additions and 2 deletions

View file

@ -343,8 +343,9 @@ export const REPOSITORY_ACCESS: RepositoryAccess[] = [
repository: 'ext-skills', repository: 'ext-skills',
teams: [ teams: [
{ team: 'core-maintainers', permission: 'admin' }, { team: 'core-maintainers', permission: 'admin' },
{ team: 'moderators', permission: 'maintain' }, { team: 'moderators', permission: 'push' },
{ team: 'skills-over-mcp-wg', permission: 'admin' }, { team: 'skills-over-mcp-wg', permission: 'push' },
{ team: 'skills-over-mcp-wg-leads', permission: 'admin' },
], ],
}, },
{ {

View file

@ -62,6 +62,7 @@ export const ROLE_IDS = {
FILE_UPLOADS_WG: 'file-uploads-wg', FILE_UPLOADS_WG: 'file-uploads-wg',
AGENTS_WG: 'agents-wg', AGENTS_WG: 'agents-wg',
SKILLS_OVER_MCP_WG: 'skills-over-mcp-wg', SKILLS_OVER_MCP_WG: 'skills-over-mcp-wg',
SKILLS_OVER_MCP_WG_LEADS: 'skills-over-mcp-wg-leads',
FILESYSTEMS_WG: 'filesystems-wg', FILESYSTEMS_WG: 'filesystems-wg',
CORE_PRIMITIVE_WG: 'core-primitive-wg', CORE_PRIMITIVE_WG: 'core-primitive-wg',

View file

@ -366,6 +366,11 @@ export const ROLES: readonly Role[] = [
github: { team: 'skills-over-mcp-wg', parent: ROLE_IDS.WORKING_GROUPS }, github: { team: 'skills-over-mcp-wg', parent: ROLE_IDS.WORKING_GROUPS },
discord: { role: 'skills over mcp working group (synced)' }, discord: { role: 'skills over mcp working group (synced)' },
}, },
{
id: ROLE_IDS.SKILLS_OVER_MCP_WG_LEADS,
description: 'Skills Over MCP Working Group leads',
github: { team: 'skills-over-mcp-wg-leads', parent: ROLE_IDS.SKILLS_OVER_MCP_WG },
},
{ {
id: ROLE_IDS.FILESYSTEMS_WG, id: ROLE_IDS.FILESYSTEMS_WG,
description: 'Filesystems Working Group', description: 'Filesystems Working Group',

View file

@ -700,6 +700,7 @@ export const MEMBERS: readonly Member[] = [
ROLE_IDS.MODERATORS, ROLE_IDS.MODERATORS,
ROLE_IDS.REFERENCE_SERVERS_MAINTAINERS, ROLE_IDS.REFERENCE_SERVERS_MAINTAINERS,
ROLE_IDS.SKILLS_OVER_MCP_WG, ROLE_IDS.SKILLS_OVER_MCP_WG,
ROLE_IDS.SKILLS_OVER_MCP_WG_LEADS,
ROLE_IDS.WORKING_GROUPS, ROLE_IDS.WORKING_GROUPS,
ROLE_IDS.APPEALS, ROLE_IDS.APPEALS,
], ],
@ -763,6 +764,7 @@ export const MEMBERS: readonly Member[] = [
ROLE_IDS.CORE_MAINTAINERS, ROLE_IDS.CORE_MAINTAINERS,
ROLE_IDS.MAINTAINERS, ROLE_IDS.MAINTAINERS,
ROLE_IDS.SKILLS_OVER_MCP_WG, ROLE_IDS.SKILLS_OVER_MCP_WG,
ROLE_IDS.SKILLS_OVER_MCP_WG_LEADS,
ROLE_IDS.TRANSPORT_WG, ROLE_IDS.TRANSPORT_WG,
ROLE_IDS.TRIGGERS_EVENTS_WG, ROLE_IDS.TRIGGERS_EVENTS_WG,
ROLE_IDS.AGENTS_WG, ROLE_IDS.AGENTS_WG,
@ -826,6 +828,7 @@ export const MEMBERS: readonly Member[] = [
ROLE_IDS.FINANCIAL_SERVICES_IG, ROLE_IDS.FINANCIAL_SERVICES_IG,
ROLE_IDS.INTERCEPTORS_WG, ROLE_IDS.INTERCEPTORS_WG,
ROLE_IDS.SKILLS_OVER_MCP_WG, ROLE_IDS.SKILLS_OVER_MCP_WG,
ROLE_IDS.SKILLS_OVER_MCP_WG_LEADS,
], ],
}, },
{ {