Victor KuznetsovandClaude Sonnet 5 e3bbe88155 Authenticate C2PA registry-sync GitHub API calls to fix CI rate-limiting ...

scripts/sync_c2pa_soft_bindings.py --check hits api.github.com to resolve
the latest upstream commit SHA, unauthenticated. That endpoint's 60/hour
rate limit is per source IP, which GitHub Actions runners exhaust fast
since many workflows share the runner IP pool -- this was failing the
lint job with "403: rate limit exceeded" on every push regardless of
whether the change touched anything related.

Send an Authorization: Bearer header built from GITHUB_TOKEN/GH_TOKEN
when set, scoped to api.github.com only (raw.githubusercontent.com is a
separate, much higher-limit CDN and doesn't need it). Wire the workflow's
own GITHUB_TOKEN secret into that step's env so CI actually has one to
send, raising the limit to 5000/hour.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-09-22 08:11:48 -07:00

..

workflows

Authenticate C2PA registry-sync GitHub API calls to fix CI rate-limiting

2026-09-22 08:11:48 -07:00

dependabot.yml

Fix output preservation, research validation, and documentation drift

2026-09-08 19:07:10 -07:00

FUNDING.yml

Add GitHub Sponsors donation button (FUNDING.yml + README badge)

2026-05-25 16:09:52 -07:00