From 60c09155b9ca3e78642fde8495100e091054bc91 Mon Sep 17 00:00:00 2001 From: Aaron Sachs <898627+asachs01@users.noreply.github.com> Date: Wed, 26 Aug 2026 12:30:27 +0000 Subject: [PATCH] fix: use reusable auto-add-to-project workflow instead of stale raw-token pattern The legacy pattern (actions/add-to-project@v1.0.2 with secrets.ADD_TO_PROJECT_TOKEN) references a PAT secret that does not exist in either wyre-technology or WYRE-AI. Replaced with the same reusable-workflow call (GitHub App token minting, no static PAT) used by all 30 sibling repos that already have this file working, including this repo's own MCP-server counterpart (WYRE-AI/ncentral-mcp) and the other two node-* client libraries that carry it (node-iqms, node-threatlocker). Root cause is NOT an org-transfer casualty: the fleet migrated off the raw-token pattern onto the reusable workflow around May 2026, but this repo was created 2026-07-03 (two months later) already carrying the stale pattern in its very first commit. The org-transfer PR (#1, 2026-08-25) only updated project-url's value and never touched the broken mechanism around it -- it was the repo's first-ever PR, which is what first triggered the (already latently broken) workflow. Matches the proven working pattern byte-for-byte: the reusable workflow hardcodes its own project-url internally (no with: override exists in its workflow_call inputs), so none of the 30 working siblings -- including three other WYRE-AI-org repos -- pass one either. This repo's legacy project-url (orgs/WYRE-AI/projects/1, set by PR #1) is dropped for the same reason every other working sibling drops it. --- .github/workflows/add-to-project.yml | 14 ++++++-------- 1 file changed, 6 insertions(+), 8 deletions(-) diff --git a/.github/workflows/add-to-project.yml b/.github/workflows/add-to-project.yml index 238e9a9..c3e0ffb 100644 --- a/.github/workflows/add-to-project.yml +++ b/.github/workflows/add-to-project.yml @@ -1,14 +1,12 @@ -name: Add to project board +name: Auto-add to project + on: issues: types: [opened] pull_request: types: [opened] + jobs: - add-to-project: - runs-on: ubuntu-latest - steps: - - uses: actions/add-to-project@v1.0.2 - with: - project-url: https://github.com/orgs/WYRE-AI/projects/1 - github-token: ${{ secrets.ADD_TO_PROJECT_TOKEN }} + call: + uses: wyre-technology/.github/.github/workflows/auto-add-to-project.yml@c3314c1065f78adf905a815ad214c71266913771 # pinned (warden C-4) — bump via PR not in-place edit + secrets: inherit