Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 22 additions & 0 deletions .github/workflows/add-to-project.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
name: Add to Operations board

on:
issues:
types: [opened, reopened]

# No GITHUB_TOKEN needed — the add-to-project step authenticates with the
# ADD_TO_PROJECT_PAT org secret.
permissions: {}

jobs:
add-to-project:
# Only auto-add issues authored by org owners/members/collaborators —
# outsider-authored issues in public repos need human triage onto the board.
if: contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.issue.author_association)
runs-on: ubuntu-latest

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

SUGGESTION: No explicit permissions: block — defaults to the repo's default token scopes.

Best practice for least-privilege workflows is to declare the minimal permissions needed. This job only reads issue metadata; a issues: read grant would suffice and limits blast radius if the PAT or default token is ever compromised.

Suggested change
runs-on: ubuntu-latest
permissions:
issues: read

Reply with @kilocode-bot fix it to have Kilo Code address this issue.

timeout-minutes: 5
steps:
- uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
with:
project-url: https://github.com/orgs/NextCommerceCo/projects/10
github-token: ${{ secrets.ADD_TO_PROJECT_PAT }}
13 changes: 13 additions & 0 deletions AGENTS.md
Original file line number Diff line number Diff line change
Expand Up @@ -38,3 +38,16 @@ Unless you are maintaining the docs site itself, skip:

This repository is maintained by the NEXT team only. External pull requests are
not accepted. See `README.md` and `docs/MAINTENANCE.md`.

## Issue tracking

Work in this repo is tracked with GitHub Issues and coordinated on the
org-level **[Operations](https://github.com/orgs/NextCommerceCo/projects/10)**
Kanban board (Todo / In Progress / Done). New issues are added to the board
automatically by the `add-to-project` workflow.

Before starting work on an issue: check it is not assigned to someone else,
assign yourself (`gh issue edit <n> --add-assignee @me`), and move the card to
In Progress. Open PRs with `Closes #<n>`; when the issue closes on merge, the board's built-in "Item closed" automation moves the card to Done.
Contributors have a `/next-board` skill that wraps these board operations
(status, claim, move, create).
Loading