hermes-admin/hermes-agent
1
0
Fork 0
Code Issues Pull Requests Actions 28 Packages Projects Releases Wiki Activity

chore(catalog): disclosure + contributor map for github_app.yaml (merge-time review edits)

Browse Source
This commit is contained in:
teknium1
2026-09-26 11:18:57 -07:00
committed by Teknium
parent cccc3e05f2
commit b26d79ea50
2 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
contributors/emails/19623185@std.stei.itb.ac.id Normal file
View File

@@ -0,0 +1 @@
himanusia

12
plugin-catalog/github_app.yaml
View File

@@ -3,7 +3,17 @@ repo: https://github.com/himanusia/hermes-github-app-plugin
sha: 2adfd020f93a5d71a563e94c88738fb8e64335f8
subdir: github_app
version: "0.1.0"
description: GitHub and GitHub Enterprise tools with bot-first attribution and approval-gated issue/PR writes.
description: >-
GitHub and GitHub Enterprise tools with bot-first attribution and approval-gated issue/PR writes.
Disclosure — authenticates as a GitHub App from GITHUB_APP_ID, GITHUB_APP_INSTALLATION_ID and a
private key in GITHUB_APP_PRIVATE_KEY or GITHUB_APP_PRIVATE_KEY_PATH/_FILE (read from the profile
env or HERMES_HOME/.env, held in memory only, never written or logged), falling back to
GITHUB_TOKEN/GH_TOKEN or `gh auth token` when no App variables are set, and reports which identity
acted in every result. Talks only to https://api.github.com or the operator-configured
GITHUB_API_URL / settings.api_url (HTTPS, no redirects; no tool argument can change the host).
Issue/comment/review/merge writes stay disabled until settings.allow_write_actions is true and each
one additionally goes through Hermes's human-approval prompt via its pre_tool_call hook (an 'always'
answer does not persist).
maintainer: himanusia
tier: community
category: tools