adam/.github
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/.github.git synced 2026-09-30 07:03:11 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(ci): drop pull-requests write from callable-dependency-review (#40)

Browse source 
Callers grant no explicit permissions, so they pass the org default
read-only token. A reusable workflow cannot request more than its
caller grants, causing startup_failure on every dependency-review run.
dependency-review-action only needs contents: read when not posting
PR comments.
This commit is contained in:
Adam Moussa 2026-06-05 12:19:06 -04:00 • committed by GitHub
parent 2e74e2a670
commit 1cc7236ef6
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 0 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
.github/workflows/callable-dependency-review.yaml vendored
View file

@ -3,7 +3,6 @@ on:
workflow_call: workflow_call:
permissions: permissions:
contents: read contents: read
pull-requests: write
jobs: jobs:
dependency-review: dependency-review:
runs-on: ubuntu-latest runs-on: ubuntu-latest