Grant all org members write access to the osac repo

[redhat-chai-bot]

Set all_members_permission = "push" on the osac repository module, granting all organization members write access.

Currently, write access to the osac repo is limited to four teams (fulfillment-wg, wg-infra, infrastructure, wg-osac-storage). Members of other working groups (observability-wg, personas-wg, etc.) only have triage (read-only) access by default, which prevents them from triggering CI retests on PRs.

This change follows the same pattern used by the issues repo, which already sets all_members_permission = "push".

---

AI-generated. Review for accuracy.

@masayag requested from Slack

Summary

• Repository access: repo_osac now sets all_members_permission = "push". This grants all organization members push access, beyond the teams already listed.
• Affected area: Repository authorization configuration. No API, controller, database, deployment, CI, test, or documentation changes are shown.
• Compatibility: This broadens write access for organization members. The existing repository settings remain unchanged.
• Tests: No test results were provided.

Risk classification

Unavailable. The supplied information does not include risk-label criteria or an applied label. I cannot state the criteria or determine whether the change was close to another classification.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Repository: osac-project/coderabbit/.coderabbit.yaml
• Review profile: CHILL
• Plan: Enterprise
• Run ID: c7047014-4228-497d-9293-14e05bd39c20

📥 Commits

Reviewing files that changed from the base of the PR and between 7dd10b7 and f05dbd0.

📒 Files selected for processing (1)

• repositories.tf

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 10 remain after this review.

---

Walkthrough

The repo_osac module now sets all_members_permission to push. Its existing source, visibility, name, and description values remain unchanged.

Changes

Repository permissions

Layer / File(s)	Summary
Set member push access repositories.tf	The repo_osac module now grants all organization members push permission. Existing repository settings are unchanged.

Priority: ➖ Normal

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Feature

Suggested labels: risk:ask

Suggested reviewers: eliorerz, masayag

Merge Risk: ⚪ Minimal · up to f05db

Organization members gain the requested ability to push to osac and trigger CI retests. No other merge-blocking behavior is identified.

🚥 Pre-merge checks | ✅ 10 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Ai-Attribution	⚠️ Warning	AI use is stated in the PR description, which says “AI-generated.” The commit message has no Assisted-by or Generated-by trailer. It instead includes `Co-Authored-By: Claude Opus 4.6 <noreply@anth…	Amend the commit to remove the AI Co-Authored-By trailer and add the applicable Red Hat Assisted-by or Generated-by attribution trailer.

✅ Passed checks (10 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the change: granting all organization members write access to the osac repository.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No-Hardcoded-Secrets	✅ Passed	The only functional addition in the PR diff is all_members_permission = "push" in repositories.tf; the other changes reformat existing fields. The diff introduces no API keys, tokens, passwords, p…
No-Weak-Crypto	✅ Passed	The pull request changes only repositories.tf, where it adds all_members_permission = "push" to the repo_osac module. The diff introduces no cryptographic algorithms, custom crypto, or secret/to…
No-Injection-Vectors	✅ Passed	The only change adds the literal all_members_permission = "push" setting to the repo_osac module in repositories.tf. The diff introduces no SQL concatenation, shell execution, eval/exec, uns…
Container-Privileges	✅ Passed	The pull request changes only repositories.tf. It adds all_members_permission = "push" to the repo_osac module. It does not change container or Kubernetes manifests, or introduce any listed priv…
No-Sensitive-Data-In-Logs	✅ Passed	The pull request changes only repositories.tf. The diff adds all_members_permission = "push" to the repo_osac module and changes no logging code or logged data. The check found no introduced sen…

Full details: Ai-Attribution

Explanation

AI use is stated in the PR description, which says “AI-generated.” The commit message has no Assisted-by or Generated-by trailer. It instead includes Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>, which the check prohibits for AI tools.

• Fix all pre-merge checks with AI

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}