fix: use file instead

Actions cannot read teams and this also versions
changes.

.github/workflows/test-and-release.yaml

@@ -34,5 +34,7 @@ jobs:
       - name: Check if source code is properly formatted
         run: npx prettier -c ./
 
+      - run: npm test
+
       - name: Semantic release
         run: npx semantic-release

.husky/pre-commit

@@ -1,2 +1,3 @@
 npx lint-staged
-npx tsc
+npx tsc
+npm test

README.md

@@ -11,8 +11,8 @@ Sets up the permissions in our AWS CI account for the repositories in this
 GitHub organization that are supposed to have access so they are be able to use
 it for CI runs.
 
-The allowed list of repositories is managed via the
-[`ci` team](https://github.com/orgs/hello-nrfcloud/teams/ci/repositories).
+The allowed list of repositories is managed via the [`repos.txt`](./repos.txt)
+file.
 
 > [!CAUTION]  
 > Do not run this against the production account, but against the CI account.

cdk/ci.ts

@@ -3,12 +3,13 @@ import { ensureGitHubOIDCProvider } from './ensureGitHubOIDCProvider.js'
 import { fromEnv } from '@nordicsemiconductor/from-env'
 import { CIApp } from './CIApp.js'
 import { listRepos } from './listRepos.js'
+import { loadRepoList } from './loadRepoList.js'
 
 const { token } = fromEnv({
 	token: 'GITHUB_TOKEN',
 })(process.env)
 
-const repos = await listRepos(token, 'hello-nrfcloud', 'ci')
+const repos = await listRepos(token, await loadRepoList())
 for (const repo of repos) {
 	console.debug(`Setting up permissions for ${repo.name} (${repo.id})...`)
 }

cdk/listRepos.ts

@@ -10,20 +10,27 @@ export type Repos = Array<Repository>
 
 export const listRepos = async (
 	token: string,
-	org: string,
-	team: string,
-): Promise<Array<Repository>> =>
-	(
-		await new Octokit({
-			auth: token,
-		}).teams.listReposInOrg({
-			org,
-			team_slug: team,
-		})
-	).data
+	repos: Array<Omit<Repository, 'id'>>,
+): Promise<Array<Repository>> => {
+	const client = new Octokit({
+		auth: token,
+	})
+
+	return (
+		await Promise.all(
+			repos.map(async (repo) =>
+				client.repos.get({
+					repo: repo.name,
+					owner: repo.owner,
+				}),
+			),
+		)
+	)
+		.map((res) => res.data)
 		.filter((repo) => repo.archived !== true)
 		.map((repo) => ({
 			id: repo.id,
 			name: repo.name,
 			owner: repo.full_name.split('/')[0] as string,
 		}))
+}

cdk/loadRepoList.spec.ts

@@ -0,0 +1,14 @@
+import { describe, it } from 'node:test'
+import assert from 'node:assert/strict'
+import { loadRepoList } from './loadRepoList.js'
+
+void describe('loadRepoList()', () => {
+	void it('should load the list of repos', async () => {
+		assert.notEqual(
+			(await loadRepoList()).find(
+				(el) => el.name === 'ci' && el.owner === 'hello-nrfcloud',
+			),
+			undefined,
+		)
+	})
+})

cdk/loadRepoList.ts

@@ -0,0 +1,13 @@
+import path from 'node:path'
+import { readFile } from 'node:fs/promises'
+import type { Repository } from './listRepos.js'
+
+export const loadRepoList = async (): Promise<Array<Omit<Repository, 'id'>>> =>
+	(await readFile(path.join(process.cwd(), 'repos.txt'), 'utf-8'))
+		.trim()
+		.split('\n')
+		.filter((s) => !s.startsWith('#'))
+		.map((s) => {
+			const [owner, name] = s.split('/') as [string, string]
+			return { owner, name }
+		})