Skip to content

ci(sync): pull OpenAPI spec from public docs URL on a weekly cron#9

Merged
acebot712 merged 1 commit intomainfrom
ci/pull-spec-from-public-docs
Apr 18, 2026
Merged

ci(sync): pull OpenAPI spec from public docs URL on a weekly cron#9
acebot712 merged 1 commit intomainfrom
ci/pull-spec-from-public-docs

Conversation

@acebot712
Copy link
Copy Markdown
Owner

Drops the broken OPENAPI_SPEC_TOKEN PAT plumbing. Pulls spec from public docs URL on a weekly cron. Companion: acebot712/promptguard#128 (deletes the dead dispatch workflow).

Replaces two pieces of broken plumbing in one shot:

* Drops secrets.OPENAPI_SPEC_TOKEN -- a fine-grained PAT scoped to
  the private monorepo with Contents: read, never set on this repo,
  so every dispatch from the monorepo failed silently.
* Drops the repository_dispatch trigger -- the monorepo workflow
  that fired the dispatch (sync-sdks.yml) needed
  secrets.SDK_SYNC_TOKEN, also never set, so the dispatch never
  reached us. That workflow is being deleted in the companion PR
  (acebot712/promptguard#128).

The OpenAPI spec is published publicly at
https://docs.promptguard.co/api-reference/openapi-developer.json --
byte-identical to the monorepo source, served by the docs site. We
curl it directly with retry + fail-on-non-2xx. No auth, no
rate-limit cliff, no PAT to rotate.

Trigger becomes a weekly cron (Mondays 06:00 UTC) plus the existing
workflow_dispatch for on-demand syncs.
@acebot712 acebot712 merged commit 84494c9 into main Apr 18, 2026
8 checks passed
@acebot712 acebot712 deleted the ci/pull-spec-from-public-docs branch April 18, 2026 23:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant