adam/.github
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/.github.git synced 2026-09-30 15:13:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(ci): drop pull-requests write from callable-dependency-review

Browse source 
Callers grant no explicit permissions, so they pass the org default
read-only token. A reusable workflow cannot request more than its
caller grants, causing startup_failure on every dependency-review run.
dependency-review-action only needs contents: read when not posting
PR comments.
This commit is contained in:
Adam Moussa 2026-06-05 12:18:52 -04:00
parent 2e74e2a670
commit 177dc057a4
1 changed files with 0 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
.github/workflows/callable-dependency-review.yaml vendored
View file

@ -3,7 +3,6 @@ on:
workflow_call:
permissions:
contents: read
pull-requests: write
jobs:
dependency-review:
runs-on: ubuntu-latest