Merge pull request #79 from openqj/feat-app-max-permissions

feat: GitHub App manifest 扩到主机最大权限

cloud/tests/test_github_app.py

@@ -86,9 +86,28 @@ class ManifestTestCase(unittest.TestCase):
         self.assertEqual(m["redirect_url"], BASE + "/github-app/callback")
         self.assertEqual(m["default_permissions"]["contents"], "write")
         self.assertEqual(m["default_permissions"]["pull_requests"], "write")
-        self.assertEqual(m["default_permissions"]["issues"], "read")
+        self.assertEqual(m["default_permissions"]["issues"], "write")
+        self.assertEqual(m["default_permissions"]["workflows"], "write")
+        self.assertEqual(m["default_permissions"]["administration"], "write")
+        self.assertEqual(m["default_permissions"]["actions"], "write")
+        self.assertEqual(m["default_permissions"]["checks"], "write")
+        # 全量：组织 / 企业 / 账号三类也必须在 manifest 里，不只仓库。
+        self.assertEqual(m["default_permissions"]["members"], "write")
+        self.assertEqual(
+            m["default_permissions"]["organization_administration"],
+            "write")
+        self.assertEqual(
+            m["default_permissions"]["enterprise_organization_installations"],
+            "write")
+        self.assertEqual(m["default_permissions"]["email_addresses"], "write")
+        self.assertEqual(m["default_permissions"]["gists"], "write")
         self.assertIn("issue_comment", m["default_events"])
         self.assertIn("pull_request", m["default_events"])
+        self.assertIn("push", m["default_events"])
+        self.assertIn("check_run", m["default_events"])
+        self.assertIn("workflow_run", m["default_events"])
+        self.assertIn("organization", m["default_events"])
+        self.assertIn("member", m["default_events"])
         self.assertFalse(m["public"])
 
     def test_manifest_requires_base(self):