ca342db70b98e56bd34c97aea489bf5ad324b592
permissions: binds, measured by matched probe
Adds `docs/ci-cd.md` -> "Workflow token scope" (the section the inline comments
on all six workflows point at) and corrects `ci.actions-credential-scoping`,
which had carried "whether `permissions:` is honored here is still UNPROBED"
and an explicit "do NOT add a `permissions:` key" since 2026-08-05.
Settled by a matched scratch-base probe pair on Gitea 1.27.1, differing only in
the gate job's single permission unit:
code: write -> job success, `Posted review-verdict/h10-PROBE=success`,
status creator: null
code: read -> job failure at the POST, curl exit 22 (HTTP >=400 under -f),
NO status written
Both reached the classify step's start marker and both logged the retarget
fence as trusted, so the read units were exercised and neither run was the #751
dropped-step shape. Both ran while the owner default was still `permissive`,
which is what establishes the declaration binds irrespective of that default.
The negative control is the load-bearing half: a green positive alone is
equally consistent with `permissions:` being a no-op sitting beside a
permissive default.
Also corrects the two places that framed the persisted checkout credential's
write-capability as decided by the instance default; since this change it is
decided by `ci-image.yml`'s own `code: read` declaration.
Decisions-Edit: yes
Refs: #748
fix(754,757): declare graphicsElementIds + padToNearestMinute, and pin every MCP tool to its OpenAPI contract (#760)
fix(754,757): declare graphicsElementIds + padToNearestMinute, and pin every MCP tool to its OpenAPI contract (#760)
ErsatzTV
ErsatzTV lets you transform your media library into a personalized, live TV experience - complete with EPG, channel scheduling, and seamless streaming to all your devices. Rediscover your content, your way.
How It Works
- Install ErsatzTV: Download and set up the server on your system.
- Add Your Media: Connect your media libraries and collections.
- Create Channels: Design and schedule your own live channels.
- Stream Anywhere: Watch on any device with IPTV and EPG support.
Key Features
- Custom channels: Create and schedule your own live TV channels.
- IPTV & EPG: Stream with IPTV and Electronic Program Guide support.
- Hardware Transcoding: High-performance streaming with hardware acceleration (NVENC, QSV, VAAPI, AMF, VideoToolbox)
- Media Server Integration: Connect Plex, Jellyfin, Emby and more.
- Music & Subtitles: Mix music videos and enjoy subtitle support.
- Open Source: Free, open, and community-driven project.
Documentation
Documentation is available at ersatztv.org.
License
This project is inspired by pseudotv-plex and the dizquetv fork and is released under the zlib license.
