[Question] Issues with .asf.yaml

[lprimak]

Search before asking

• I had searched in the issues, including closed issues and found no similar issues.

Question

An error occurred while processing the github feature in .asf.yaml:

Validation failed while creating ruleset 'Branch Protection': ['Actor shiro private team must be part of the ruleset source or owner organization']

[lprimak]

@ppkarwasz Can you please take a look at .asf.yaml to see what's going on there?
Thank you

[lprimak]

@fpapon @jbampton do you have any ideas?

[jbampton]

This is normally setup in the repo settings tab when creating the rulesets i think you need the team for which it applies to. I have done this on my own repos. Im heading out now. Thanks

…

On Wed, 3 June 2026, 12:13 pm Lenny Primak, ***@***.***> wrote: *lprimak* left a comment (apache/shiro#2746) <#2746 (comment)> @fpapon <https://github.com/fpapon> @jbampton <https://github.com/jbampton> do you have any ideas? — Reply to this email directly, view it on GitHub <#2746?email_source=notifications&email_token=AADGHO3ZVUYW7H6VNMKVLWL456CV7A5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTINRQHA2TCNZWGA3KM4TFMFZW63VHNVSW45DJN5XKKZLWMVXHJLDGN5XXIZLSL5RWY2LDNM#issuecomment-4608517606>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AADGHOY6XWLKK5PGJXO44YD456CV7AVCNFSM6AAAAACZYACUWOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DMMBYGUYTONRQGY> . Triage notifications, keep track of coding agent tasks and review pull requests on the go with GitHub Mobile for iOS <https://github.com/notifications/mobile/ios/AADGHOYO4KODDQFNJJDGP23456CV7A5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTINRQHA2TCNZWGA3KM4TFMFZW63VHNVSW45DJN5XKKZLWMVXHJKTGN5XXIZLSL5UW64Y> and Android <https://github.com/notifications/mobile/android/AADGHO3RAOHO73AMF2VIB6D456CV7A5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTINRQHA2TCNZWGA3KM4TFMFZW63VHNVSW45DJN5XKKZLWMVXHJLTGN5XXIZLSL5QW4ZDSN5UWI>. Download it today! You are receiving this because you were mentioned.Message ID: ***@***.***>

[lprimak]

Tried both apache/shiro-private and shiro-private to no avail.

Will try to put i a number returned by https://docs.github.com/en/rest/teams/teams?apiVersion=2026-03-10#get-a-team-by-name next, after that "shiro private" with a space... wish me luck

[lprimak]

Here is what I see:

% gh api \
  -H "Accept: application/vnd.github+json" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  /orgs/apache/teams/shiro-private

{
  "name": "shiro private",
  "id": 6163760,
  "node_id": "XXXX",
  "slug": "shiro-private",
  "description": null,
  "privacy": "secret",
...
}

[lprimak]

@asf-tooling @asf-gitbox @ppkarwasz I am not sure where to go from here. Can anyone help?

[lprimak]

See 3d8e517

[ppkarwasz]

@lprimak: did you try using 6163760 as team id (with a comment on what it is)?

[lprimak]

I have. ASF infra said private teams won't work here.