0xrsydn/nix-hermes-agent
1
mirror of https://github.com/0xrsydn/nix-hermes-agent.git synced 2026-08-07 00:53:52 +00:00
Code Issues Projects Releases Packages Wiki Activity

docs: clarify update automation token

Browse source
This commit is contained in:
Rasyidan Akbar F. 2026-07-14 20:40:49 +07:00
commit 103f19e978
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

10
docs/UPDATE-POLICY.md
View file

@ -32,11 +32,11 @@ updater job red, but does not discard the candidate.
## Repository token ## Repository token
Set the Actions secret `HERMES_UPDATE_TOKEN` to a fine-grained PAT or GitHub App Set the Actions secret `HERMES_UPDATE_TOKEN` to a fine-grained PAT or GitHub App
token with repository contents and pull-request write access. GitHub suppresses token with repository contents and pull-request write access. Pull requests
new workflow runs for PRs created with the default `GITHUB_TOKEN`; the dedicated created with the default `GITHUB_TOKEN` can start workflow runs, but GitHub puts
token allows the candidate PR to receive normal required checks. Scheduled those runs into an approval-required state. The dedicated token lets candidate
updates fail clearly when this secret is absent rather than opening an unchecked checks start automatically. Scheduled updates fail clearly when this secret is
PR. absent rather than opening a candidate that waits for manual workflow approval.
Protect `main` with the ordinary `CI / check` status and the Protect `main` with the ordinary `CI / check` status and the
`Nightly Candidate / check` status. The latter passes without installing Nix `Nightly Candidate / check` status. The latter passes without installing Nix