Dashboard › publish › Distillation
83a78639-422d-4e3f-a7bd-d945c1799f87["lore_tm_v1_WpaNkgHH_IyPkQJkQbcWcCzrNT0JnQEEMRRgnrmwPDg","lore_tm_v1_nxm82wABd8Pi0E4XFZWpUN6ksbdBk2on37SF5nb173U","lore_tm_v1_SBYmbWFkObO0AlGIav2_R0YrNT0ogOOXbR9E1NffXQY","lore_tm_v1_y8XcCixeqKeVgppyfU4Hbe2veTPgv-wCn1AUnxF6N-4","lore_tm_v1_xfePKoZ4Rx3AfehyAzsBne-LdLDDzkr4AHALg8SNWII","lore_tm_v1_G5Mz-MUyvyuCoyi43KywKLFL1ovLtbl9bgb0jH4oXVg","lore_tm_v1_-1Ppkaq2aGYcTM9rLwR5OcZMbKq7P6Z8uFuWpyPfSmk"]
Date: Aug 27, 2026
Metadata: read; Administration is not required. Installation access to the target repository is required; IAT is accepted (UAT, IAT). Effective highest role reflects repository, team, organization, and enterprise grants rather than grant source; documented requirements are for private resources and public-resource behavior may differ.publish.yml match at /home/byk/Code/getsentry/security-as-code/rbac/env/prod-github/repo/publish.yml./home/byk/Code/getsentry/security-as-code/rbac/env/prod-github/repo/publish.yml has 9 lines: repo_slug: publish; tag: prod; team permissions write: [engineering], triage: [bots-write], and admin: [releng].publish.yml history includes commits: de698e31 Update publish repo team permissions (#2394); 43150992 chores(gh): Clean up on release-bot (#2159); 4e6f05e7 feat(rbac): Rename Web Frontend SDK to JavaScript SDKs (#2033); 53cf1915 add profiling team to list of teams with publish permissions; 8b625e9f team-gdx > gdx; b53a151b Add SDK teams to publish triage; e9ba00bb fix: remove web sdk team's write permission; cc82644c remove unnecessary security team definition; 7358d483 Update publish.yml; a92e58c3 transform tf to yml.de698e3139dae51cd4fb70a8e1f0e45349e951a1 (Update publish repo team permissions (#2394)) was authored by Burak Yigit Kaya <byk@sentry.io> on Feb 6, 2026 at 23:27:01 UTC and committed by GitHub at 15:27:01 -0800; co-authored by Jeffrey Hung <17494876+Jeffreyhung@users.noreply.github.com>. It changed rbac/env/prod-github/repo/publish.yml by consolidating engineering from read to write, removing release-approvers, team-web-sdk-backend, team-javascript-sdks, team-mobile, gdx, and profiling from triage because they were redundant engineering child teams, retaining bots-write at triage, and retaining releng at admin. (meaning Feb 6, 2026)8ee1105d Add pierre.massat@sentry.io to release approvers (#2335); 91fc042d feat: Add Michi to release approvers (#2019); 8931bc1d Merge pull request #1638 from getsentry/more-approvers; 55dff0af feat: Add release approvers; 825349c1 Merge pull request #1431 from getsentry/eliatcodecov/add_codecov_to_release_approvers; e28a5ea2 Alphabetical Sort of Newly Added Release Approvers; 63d013ef Add Trent Schmidt and Tom Hu to release-approvers.tf; 5c5e164d Add dev infra team to release approvers (#877); abadfe34 Add Alex to release approvers; 3641f7b4 Merge pull request #126 from getsentry/clean-up-github-release-approval-team.CI is always set to true.GITHUB_ACTIONS is always set to true when GitHub Actions is running the workflow; it can differentiate tests run locally from those run by GitHub Actions.GITHUB_* and RUNNER_* environment variables cannot be overwritten; CI can currently be overwritten, though GitHub does not guarantee this will always remain possible. Default variables are unavailable through the env context but most have similarly named context properties, e.g. ${{ github.ref }} for GITHUB_REF; GitHub recommends using variables rather than hardcoded filesystem paths.GITHUB_ACTION names the running action or step id; special characters are removed, scripts without an id use __run, repeated scripts/actions gain numeric suffixes such as __run_2 and actionscheckout2.