feat(repos): list an organization's public repositories, without a credential #677

Merged
coilyco-ops merged 1 commit from coilyco-ops/public-repo-inventory into main 2026-08-13 18:36:47 +00:00 AGit
Member

closes #642 - list_public_repos reports name, description, html_url, language and updated_at; public because it carries no credential rather than because it filters

closes #642 - list_public_repos reports name, description, html_url, language and updated_at; public because it carries no credential rather than because it filters
feat(repos): list an organization's public repositories, without a credential
All checks were successful
ci / image-build (pull_request) Successful in 23s
ci / test (pull_request) Successful in 38s
ci / publish-echo-image (pull_request) Has been skipped
ci / publish-observed (pull_request) Has been skipped
4ee913ea47
list_public_repos reports name, description, html_url, language and
updated_at for an org's public repositories, so the question "what does
this org have" is answered from the forge rather than from a list
someone pasted into a prompt and stopped maintaining.

Public because it holds no credential. No Authorization header is set
anywhere in the file and a test asserts none is sent. That is a stronger
guarantee than a visibility filter, which is a line of code that can be
written wrong or regressed later. A private record that arrives anyway
is still dropped, because a wrong token configured elsewhere must not
become a disclosure here.

It does not depend on the mount work in sirens-echo#633. An inventory is
metadata and comes from the API, so it reports what the organization has
rather than what a mount happens to contain. Those drift apart the
moment a repository is added.

Off unless a deployment names both a forge and an org, the posture the
fetch tool and the scratchpad already take. It borrows the fetch
dialer, so an inventory pointed at an internal address fails at connect.

Refs sirens-echo#642

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: Kai Siren <coilysiren@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
coilyco-gaming/sirens-echo!677
No description provided.