open-swe/agent
Johannes du Plessis 89f886e2fe
fix: request actions read for sandbox logs (#1642)
* fix: request actions read for sandbox logs

Request optional Actions read permission for sandbox proxy tokens, with fallback for installations that have not approved it yet. Update setup docs and prompt guidance for safe GitHub Actions log usage.

Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>

* fix: restore actions:read scope after workflow push

After an approved workflow push, the guard was restoring the proxy with
BASE_RUNTIME_PROXY_TOKEN_PERMISSIONS, which excludes the actions: read
scope this PR adds. Restore with RUNTIME_PROXY_TOKEN_PERMISSIONS (which
includes actions: read) and fall back to BASE if the install hasn't
granted Actions read — mirroring the pattern in _create_sandbox_with_proxy.

Addresses review comment on PR #1642.

---------

Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>
2026-06-29 13:28:13 -07:00
..
dashboard feat: publish plans from sandbox files (#1635) 2026-06-29 13:02:55 -07:00
integrations feat: publish plans from sandbox files (#1635) 2026-06-29 13:02:55 -07:00
middleware fix: request actions read for sandbox logs (#1642) 2026-06-29 13:28:13 -07:00
skills feat: outcomes dataset + bootstrap/continual split via skills (#1365) 2026-06-01 13:25:12 -07:00
tools feat: add Slack breakout thread tool (#1638) 2026-06-29 13:16:54 -07:00
utils fix: request actions read for sandbox logs (#1642) 2026-06-29 13:28:13 -07:00
webhooks feat: include Slack channel context in prompts (#1633) 2026-06-29 12:24:06 -07:00
analyzer.py feat: route graphs to separate LangSmith tracing projects (#1508) 2026-06-11 17:57:16 -07:00
chat.py feat: chat with your PR on the review page (#1534) 2026-06-15 17:17:30 -07:00
completion.py fix: surface Slack thread errors (#1627) 2026-06-29 09:54:56 -07:00
dispatch.py refactor: durable interrupt dispatch + completion webhook (#1621) 2026-06-26 13:48:38 -07:00
encryption.py feat: support TOKEN_ENCRYPTION_KEY rotation via MultiFernet [closes AB-2323] (#1275) 2026-05-08 14:29:23 -07:00
prompt.py fix: request actions read for sandbox logs (#1642) 2026-06-29 13:28:13 -07:00
reconcile.py refactor: durable interrupt dispatch + completion webhook (#1621) 2026-06-26 13:48:38 -07:00
review_style_collector.py feat: PR review page (#1495) 2026-06-11 16:11:10 -07:00
review_style_guidance.py feat: tune reviewer for precision — web/wiki tools + recalibrated prompt (#1312) 2026-05-20 18:35:00 +00:00
reviewer.py hotfix: stop prompting agent/reviewer to wrap installs in sfw (#1625) 2026-06-26 16:08:38 -07:00
reviewer_diff.py fix: reviewer reviews full diff; fix review UI scroll + dark-mode composer (#1575) 2026-06-18 19:24:52 -07:00
reviewer_eval_store.py feat: Run reviewer eval in a GitHub Action; dashboard becomes read-only (#1556) 2026-06-16 19:38:36 -07:00
reviewer_findings.py fix: Reviews tab — anchored finding card, paginated list, file tree truncation (#1507) 2026-06-11 17:52:20 -07:00
reviewer_groups.py fix: Simplify review explanation: full-width, plain prose, no diff links (#1547) 2026-06-16 15:32:24 -07:00
reviewer_publish.py fix: post reviewer resolution notes verbatim (#1624) 2026-06-26 16:08:25 -07:00
reviewer_reconcile.py fix: post reviewer resolution notes verbatim (#1624) 2026-06-26 16:08:25 -07:00
reviewer_trace_context.py feat: add PR trace resolution (#1612) 2026-06-25 14:11:21 -07:00
scheduler.py refactor: durable interrupt dispatch + completion webhook (#1621) 2026-06-26 13:48:38 -07:00
server.py fix: request actions read for sandbox logs (#1642) 2026-06-29 13:28:13 -07:00
webapp.py feat: add Slack breakout thread tool (#1638) 2026-06-29 13:16:54 -07:00