mirror of
https://github.com/NVIDIA/skills.git
synced 2026-09-14 15:41:50 +08:00
1700ebd31b
Per review feedback on #343: - Preflight the YAML parser and make an unparsable allowlist fail the job with a visible error, instead of silently granting nothing. - Read the allowlist from the tip of the base branch rather than the event's base SHA, so a re-run picks up entries merged after the PR was opened. Same security property: still base-branch content only. - Note in the allowlist header that per-entry flow is a deliberate v1. Signed-off-by: Moshe Abramovitch <moshea@nvidia.com>