원클릭으로 Manus에서 모든 스킬 실행

repo-git-identity

스타1

포크0

업데이트2026년 4월 4일 14:23

Enforce the required repo-local Git and GitHub identity for this repository. Use when: committing, amending, rebasing, force-pushing, closing issues, using gh, or doing any authenticated GitHub operation for hora-prathinidhi.

설치

Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.

Manus에서 실행

출처

aarshps

aarshps/hora-prathinidhi

GitHub 저장소 열기 Creator 저장소 보기

다운로드

Manus에서 실행

Repo Git Identity

When to Use

Any git commit, rebase, amend, or history rewrite in this repo
Any push, force-push, fetch with auth, or GitHub API action for this repo
Any gh or issue/PR/comment operation tied to this repo

Required Identity

Commit author and committer must match the repo-local app or bot identity configured in .git/config
Authenticated GitHub operations must use the repo-local GitHub App flow for the current machine — never a personal default gh session

Repo-Local Setup

.git/config must contain:
- user.name — the repo-local app or bot identity
- user.email — the app's no-reply email or a bot-scoped address
- user.useConfigOnly = true
- credential.helper — wired to the repo-local credential helper script under .git/helpers/
Helpers live in .git/helpers/ (gitignored, never committed):
- .git/helpers/gh-app — wrapper for gh CLI (injects app GH_TOKEN)
- .git/helpers/optacbook-auth.mjs — git credential helper (auto-generates installation tokens)
- .git/helpers/get-token.mjs — standalone token generator (prints token to stdout)
- The app's private .pem key (mode 600)
Treat bare gh as unsafe on every machine; global gh may still be logged into personal accounts, so repo work must always use the wrapper instead of relying on machine-global auth state
Do not hardcode any specific app name, App ID, email, or key filename in tracked repo files

Procedure

Before creating commits: git config --local --get-regexp '^user\.'
For gh CLI work: .git/helpers/gh-app <subcommand> — never bare gh
For authenticated git transport: the local credential helper auto-generates app tokens
Before push: git log --format=fuller -1 — must match the repo-local identity from .git/config
If commit identity is wrong: stop, rewrite, never push with wrong author

Push Rules

All git push / git pull operations work through the local credential helper
All gh operations for this repo must go through .git/helpers/gh-app
If force-pushing, use --force-with-lease against the known remote SHA

Recovery

Wrong identity local only → amend or rebase before push
Wrong identity landed on main → rewrite, force-push with lease, verify issue/PR state

Verification

git log --format=fuller -1 matches the repo-local user.name and user.email from .git/config
.git/helpers/gh-app auth status shows the repo-local bot account (not a personal account)
git fetch origin succeeds (credential helper generates token)
If gh auth status is checked for audit only, treat any personal login as proof that bare gh remains unsafe rather than as repo auth proof

이 저장소의 다른 Skills

같은 저장소

data-validation

aarshps/hora-prathinidhi

Validate integrity of all public/data JSON files. Use when: after editing candidates, constituencies, or districts JSON; before committing data changes; checking coverage completeness; debugging data mismatches.

2026-04-251

public-candidate-sync

aarshps/hora-prathinidhi

Refresh public district candidate rows from structured live-field research plus staged facts/timelines. Use when: surfacing all candidates per constituency in the app, resyncing public/data after research candidate changes, or restoring legacy candidate route aliases.

2026-04-251

session-wrap-up

aarshps/hora-prathinidhi

Wrap up a meaningful repo work session. Use when: folding durable learnings into repo-local skills, syncing AGENTS/README/handoff docs, or preparing the final close-out commit and push.

2026-04-241

issue-watch-closeout

aarshps/hora-prathinidhi

Drive recurring GitHub issue work from shipped slices to final closeout or reusable closed-issue audits.

2026-04-241

constituency-outcome-slice

aarshps/hora-prathinidhi

Work one bounded constituency possible-outcome slice. Use when: creating or reviewing seat-local outcome packets under the new 1 primary + 3 reviewer workflow.

2026-04-081

ui-conventions

aarshps/hora-prathinidhi

UI rules for the Kerala elections app. Use when: modifying components, adding status indicators, changing how candidates or constituencies display, or touching motion.

2026-04-071

name	repo-git-identity
description	Enforce the required repo-local Git and GitHub identity for this repository. Use when: committing, amending, rebasing, force-pushing, closing issues, using gh, or doing any authenticated GitHub operation for hora-prathinidhi.

Repo Git Identity

When to Use

Any git commit, rebase, amend, or history rewrite in this repo
Any push, force-push, fetch with auth, or GitHub API action for this repo
Any gh or issue/PR/comment operation tied to this repo

Required Identity

Commit author and committer must match the repo-local app or bot identity configured in .git/config
Authenticated GitHub operations must use the repo-local GitHub App flow for the current machine — never a personal default gh session

Repo-Local Setup

.git/config must contain:
- user.name — the repo-local app or bot identity
- user.email — the app's no-reply email or a bot-scoped address
- user.useConfigOnly = true
- credential.helper — wired to the repo-local credential helper script under .git/helpers/
Helpers live in .git/helpers/ (gitignored, never committed):
- .git/helpers/gh-app — wrapper for gh CLI (injects app GH_TOKEN)
- .git/helpers/optacbook-auth.mjs — git credential helper (auto-generates installation tokens)
- .git/helpers/get-token.mjs — standalone token generator (prints token to stdout)
- The app's private .pem key (mode 600)
Treat bare gh as unsafe on every machine; global gh may still be logged into personal accounts, so repo work must always use the wrapper instead of relying on machine-global auth state
Do not hardcode any specific app name, App ID, email, or key filename in tracked repo files

Procedure

Before creating commits: git config --local --get-regexp '^user\.'
For gh CLI work: .git/helpers/gh-app <subcommand> — never bare gh
For authenticated git transport: the local credential helper auto-generates app tokens
Before push: git log --format=fuller -1 — must match the repo-local identity from .git/config
If commit identity is wrong: stop, rewrite, never push with wrong author

Push Rules

All git push / git pull operations work through the local credential helper
All gh operations for this repo must go through .git/helpers/gh-app
If force-pushing, use --force-with-lease against the known remote SHA

Recovery

Wrong identity local only → amend or rebase before push
Wrong identity landed on main → rewrite, force-push with lease, verify issue/PR state

Verification

git log --format=fuller -1 matches the repo-local user.name and user.email from .git/config
.git/helpers/gh-app auth status shows the repo-local bot account (not a personal account)
git fetch origin succeeds (credential helper generates token)
If gh auth status is checked for audit only, treat any personal login as proof that bare gh remains unsafe rather than as repo auth proof