Scaled-Tech-Consulting/Gitea-Tools
2
0
Fork 0
Code Issues 6 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

Add gated Gitea PR review actions #15

New Issue
Closed
opened 2026-07-01 11:16:05 -05:00 by jcwalker3 · 0 comments
jcwalker3 commented 2026-07-01 11:16:05 -05:00
Owner
Copy Link
Copy Source

Parent

Roadmap #10 — Task-scoped MCP execution profiles for LLM-operated Gitea workflows

Dependencies

Depends on:

  • authenticated-user identity lookup
  • execution profile model
  • PR author and reviewer eligibility checks

Scope

Add gated PR review actions:

  • comment review findings
  • request changes
  • approve PR

Safety requirements

Before any review mutation:

  • run authenticated-user lookup
  • run active profile lookup
  • verify PR author
  • verify reviewer eligibility
  • verify requested action is allowed by the active profile
  • fail closed if identity/profile/eligibility cannot be proven

Acceptance criteria

  • Review actions are gated by identity and eligibility.
  • Self-approval is blocked.
  • All review mutations are audit logged.
  • Tool output explains why an action was allowed or blocked.
  • Tokens and secrets are redacted.
  • Existing Gitea MCP behavior is not broken.

Non-goals

  • Do not add merge behavior in this issue unless separately approved.
  • Do not add Jenkins/Ops/deploy behavior.
  • Do not bypass Gitea branch protections.

Proposed labels

mcp · gitea · review · mutating · safety-gates

## Parent Roadmap #10 — Task-scoped MCP execution profiles for LLM-operated Gitea workflows ## Dependencies Depends on: * authenticated-user identity lookup * execution profile model * PR author and reviewer eligibility checks ## Scope Add gated PR review actions: * comment review findings * request changes * approve PR ## Safety requirements Before any review mutation: * run authenticated-user lookup * run active profile lookup * verify PR author * verify reviewer eligibility * verify requested action is allowed by the active profile * fail closed if identity/profile/eligibility cannot be proven ## Acceptance criteria * Review actions are gated by identity and eligibility. * Self-approval is blocked. * All review mutations are audit logged. * Tool output explains why an action was allowed or blocked. * Tokens and secrets are redacted. * Existing Gitea MCP behavior is not broken. ## Non-goals * Do not add merge behavior in this issue unless separately approved. * Do not add Jenkins/Ops/deploy behavior. * Do not bypass Gitea branch protections. ## Proposed labels `mcp` · `gitea` · `review` · `mutating` · `safety-gates`
jcwalker3 added the mcpsecuritygiteamutating labels 2026-07-01 11:28:25 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
chore
documentation
Docs / runbooks
 gitea
Gitea MCP workflow
 important
mcp
MCP server / tooling
 mutating
Mutating action; requires gating
 nice-to-have
read-only
Read-only, no mutation
 roadmap
Roadmap / umbrella issue
 security
Security / trust boundary
 status:in-progress
Issue is being worked on
No Label gitea mcp mutating security
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
jcwalker3 sysadmin
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Scaled-Tech-Consulting/Gitea-Tools#15
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?