Add ClawHub publish workflow - #7
Merged
Merged
Conversation
Keeps the clawhub.ai charming-cli skill listing in sync with skills/charming-cli/SKILL.md using ClawHub's own reusable skill-publish workflow. Dry-runs on PRs touching skills/**, publishes for real on GitHub Release.
metadata.openclaw.requires.bins only checks presence; it never installed anything. Adds an install entry so OpenClaw can install the CLI via npm when it's missing.
Reusable-workflow job permissions can't exceed what the caller grants; skill-publish.yml requests id-token: write for its own source-verification step, which the caller wasn't providing.
Org policy requires every action pinned to a full commit SHA. ClawHub's own skill-publish.yml reusable workflow references actions/checkout and actions/upload-artifact by tag internally, which fails that check and blocks the run before any job starts. Hand-rolling the checkout/setup steps (already SHA-pinned, matching this repo's other workflows) and calling clawhub CLI via npx avoids depending on their workflow's own pinning.
sync is a top-level command, not under the skill subcommand group; skill's own subcommands are publish/verify/tag/rename/merge. Default scan already finds skills/charming-cli with no --root override needed, confirmed with a local dry run.
The ClawHub org got created as @charming, not @tambo-labs — the skill was manually published there as slug 'charming'. clawhub sync derives the slug from the folder name, so skills/charming-cli/ is renamed to skills/charming/ (and the SKILL.md name field to match) to keep automated syncs pointed at the same listing instead of creating an orphaned charming-cli one.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Keeps the clawhub.ai
charming-cliskill listing in sync withskills/charming-cli/SKILL.md, mirroring the pattern from #6 (Homebrew).Uses ClawHub's own reusable
skill-publish.ymlworkflow rather than hand-rolling the CLI call:skills/**workflow_dispatch)Skills don't support OIDC/trusted publishing yet (the reusable workflow itself errors on that path), so this uses the
CLAWHUB_TOKENsecret already set on this repo.Requires:
CLAWHUB_TOKENsecret (done) and thecharming-clislug already claimed under thetambo-labsowner via a manual first publish (done).