{"repo":"NousResearch/hermes-agent","public_id":"6679","display_label":"CI fork PR token handling and comment posting fixes","summary":"These issues and pull requests address failures in CI workflows when running on fork PRs, where missing or inaccessible AUTOFIX_BOT_PAT tokens cause comment posting, label fetching, and supply chain audit steps to fail. The work involves adding fallback logic to use github.token when the bot PAT is unavailable.","subsystem":null,"counts":{"members":6,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":2,"merged_prs":2,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":6681},"resolution":{"state":"partially_resolved","by":"pr-6681"},"freshness":{"state":"verified","last_verified_at":"2026-07-17T22:52:59+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_PARTIAL","link_density":0.29066666666666663},"fix_edges":[{"issue_number":6679,"pr_number":6681,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true},{"issue_number":66559,"pr_number":66577,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false}],"members":[{"kind":"issue","number":6679,"title":"[CI] Supply chain audit workflow fails on all fork PRs — GITHUB_TOKEN can't post comments","url":null,"state":"closed"},{"kind":"issue","number":66559,"title":"CI-sensitive file review fails on every fork PR: label fetch cannot read AUTOFIX_BOT_PAT","url":null,"state":"closed"},{"kind":"pr","number":6681,"title":"fix(ci): don't fail supply chain scan when PR comment can't be posted on fork PRs","url":null,"state":"merged","close_reason":{"category":"merged","implication":"superseded"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":[".github/workflows/supply-chain-audit.yml"]},{"kind":"pr","number":66560,"title":"fix(ci): fall back to github.token for the PR label fetch on fork PRs","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"1e01a4bbe7ebf35cb1452c2e0c95f886dc9c758f","number":0},{"kind":"pr","value":"#66373","number":66373},{"kind":"pr","value":"#66577","number":66577}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":66562,"title":"fix(ci): fall back to github.token when AUTOFIX_BOT_PAT empty on fork PRs","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#66577","number":66577}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":66577,"title":"fix(ci): restore fork-safe token fallback on PR gates broken by #66373","url":null,"state":"merged","close_reason":{"category":"merged","implication":"superseded"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":[".github/actions/detect-changes/action.yml",".github/workflows/ci.yml",".github/workflows/lint.yml",".github/workflows/supply-chain-audit.yml"]}],"trust":{"default_tier":"verified","includes_suggested":false}}