danger / danger-pr-comment / 42689231083
100%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 2
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 100.0%. Remained the same
42689231083

push

github

web-flow 
Remove RELEASERS release authorization (#16)

## Summary

Remove the `RELEASERS` allowlist, authorization job, and rerun
actor-matching gate. Keep the release job restricted to `main` and reuse
`ruby-gem-release@v0.4.0`. Update release documentation to use
environment approvals and explain deletion of the obsolete variable
after merge.

## Before merging

**AI note on behalf of @dblock:** The `release` environment currently
has no required reviewers. Without configuring approval protection, this
change allows repository writers to publish without maintainer approval.
Writers can edit `RELEASERS`, so the old variable was not an independent
security boundary either.

To retain maintainer-only approval, run as a repository admin to require
`numbata` or `dblock`, allowing self-approval and preserving the
existing branch policy:

```sh
gh api -X PUT repos/numbata/danger-pr-comment/environments/release --input - <<"JSON"
{
  "reviewers": [{"type": "User", "id": 82400}, {"type": "User", "id": 542335}],
  "prevent_self_review": false,
  "deployment_branch_policy": {"protected_branches": false, "custom_branch_policies": true}
}
JSON
```

Also disable administrator bypass in **Settings > Environments >
release**, retain the `main` deployment policy, and keep the RubyGems
trusted publisher bound to `release`. Any writer may dispatch; an
authorized reviewer must approve before the release job starts. This PR
does not change repository settings or delete variables.

## Validation

`actionlint`, `git diff --check`, and a YAML structure check passed,
confirming only the main-gated reusable release job remains. No Ruby
code changed and no release was dispatched.

20 of 20 relevant lines covered (100.0%)

8.3 hits per line

Jobs
ID Job ID Ran Files Coverage
1 42689231083.1 2
100.0
GitHub Action Run
Source Files on build 42689231083