From 502c2669de7aa695880fc0b389c195a88fb4847c Mon Sep 17 00:00:00 2001 From: Human-Gechi Date: Tue, 21 Jul 2026 09:24:00 +0100 Subject: [PATCH 1/3] changingg policies --- .github/workflows/plan.yml | 1 + policies/policy.yaml | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/plan.yml b/.github/workflows/plan.yml index 6357b82..f4c0c3b 100644 --- a/.github/workflows/plan.yml +++ b/.github/workflows/plan.yml @@ -22,6 +22,7 @@ jobs: run: > python -m provisioner.cli plan --config policies/ + --conn-string "$DATABASE_URL" --post-comment --repo ${{ github.repository }} --pr-number ${{ github.event.pull_request.number }} diff --git a/policies/policy.yaml b/policies/policy.yaml index 1f30d8c..eb49560 100644 --- a/policies/policy.yaml +++ b/policies/policy.yaml @@ -38,7 +38,7 @@ roles: admin: description: "Full platform administrators" - member_of: [analysts, finance] + member_of: [analysts, finance, interns] grants: [] tags: From 37401c4244d206250040bde58c7da4aa324ca458 Mon Sep 17 00:00:00 2001 From: Human-Gechi Date: Tue, 21 Jul 2026 09:28:58 +0100 Subject: [PATCH 2/3] permissions --- .github/workflows/plan.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/plan.yml b/.github/workflows/plan.yml index f4c0c3b..c6c5cba 100644 --- a/.github/workflows/plan.yml +++ b/.github/workflows/plan.yml @@ -6,6 +6,7 @@ on: - "policies/**" permissions: issues: write + contents: read jobs: plan: From 986b1781131ad7327e3fcd0d60728a620617f969 Mon Sep 17 00:00:00 2001 From: Human-Gechi Date: Tue, 21 Jul 2026 09:36:32 +0100 Subject: [PATCH 3/3] 'fix --- .github/workflows/plan.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/plan.yml b/.github/workflows/plan.yml index c6c5cba..e3c6bd1 100644 --- a/.github/workflows/plan.yml +++ b/.github/workflows/plan.yml @@ -29,4 +29,4 @@ jobs: --pr-number ${{ github.event.pull_request.number }} env: DATABASE_URL: ${{ secrets.DATABASE_URL }} - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} \ No newline at end of file + GITHUB_TOKEN: ${{ secrets.RBAC_GIT_TOKEN }} \ No newline at end of file