diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 3f5134e..7fd915b 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -18,10 +18,14 @@ permissions: jobs: claude: - # Run on manual dispatch, or when an issue/PR comment mentions @claude. + # Run on manual dispatch, or when a repo owner/member/collaborator's + # issue/PR comment mentions @claude. The author gate matters on a public + # repo: without it, any passer-by comment could drive Claude (and spend + # the API key) with write permissions on this repo. if: >- github.event_name == 'workflow_dispatch' || - contains(github.event.comment.body, '@claude') + (contains(github.event.comment.body, '@claude') && + contains(fromJSON('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association)) runs-on: ubuntu-latest steps: - name: Checkout diff --git a/README.md b/README.md index 7a20b1b..5bd08ed 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,7 @@ circadian day cycle, TV-aware bias lighting, night motion guidance, a panic mode, and honoured manual overrides. > The CLI and Python package are currently named `hue-iac`; they will be renamed -> to `hueman` before a public release. Everywhere you see `hue-iac` below, that's +> to `hueman` in an upcoming release. Everywhere you see `hue-iac` below, that's > this project. You describe the desired state of your lights in a YAML file; `hue-iac` diffs it diff --git a/deploy/synology/README.md b/deploy/synology/README.md index d7f8e80..37c439a 100644 --- a/deploy/synology/README.md +++ b/deploy/synology/README.md @@ -7,7 +7,7 @@ nothing here needs a seasonal edit. ## Layout ``` $HUE_IAC_HOME/ # e.g. /volume1//hue-iac - src/ # git clone of hue-iac + src/ # git clone of this repo .venv/ # python3 -m venv; pip install -e ./src hue.yaml .hue-key .hue-pin.json .hue-backup/ bin/re-anchor.sh logs/ @@ -17,7 +17,7 @@ $HUE_IAC_HOME/ # e.g. /volume1//hue-iac ```sh HUE_IAC_HOME=/volume1//hue-iac mkdir -p "$HUE_IAC_HOME" && cd "$HUE_IAC_HOME" -git clone https://github.com/cnewkirk/hue-iac.git src +git clone https://github.com/cnewkirk/hueman.git src python3 -m venv .venv .venv/bin/pip install -e ./src # pulls requests, PyYAML, tzdata mkdir -p bin logs .hue-backup