fix: add workflow_dispatch to audit + revoke bootstrap PAT#99
Merged
datasciencemonkey merged 2 commits intoApr 5, 2026
Merged
Conversation
- Add workflow_dispatch trigger to dependency-audit.yml so it can be run on-demand from the GitHub Actions tab - After the first successful PAT rotation, list all pre-existing tokens and revoke them (including the bootstrap PAT the user pasted). This ensures no stale tokens sit around after the app has its own controlled short-lived token.
Instead of revoking every token except the freshly minted one (which nuked the user's other PATs for notebooks, CI, etc.), identify the bootstrap PAT as the most-recently-created token without a "coda-auto-rotated" comment and revoke only that one.
datasciencemonkey
deleted the
fix/workflow-dispatch-and-bootstrap-pat-cleanup
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #97, closes #98
Summary
workflow_dispatchtrigger todependency-audit.ymlso it can be run on-demand from the Actions tabrevoke_bootstrap_tokens()toPATRotator— after the first successful rotation, lists all pre-existing tokens and revokes them (including the bootstrap PAT the user pasted)app.pyPAT submission handler: called immediately after first_rotate_once()succeedsTest plan
test_pat_rotator.pytests pass