1 parent b3548a3 commit d6bf7beCopy full SHA for d6bf7be
1 file changed
.github/workflows/issue-triage.yml
@@ -16,9 +16,14 @@ name: Issue and PR Triage
16
permissions:
17
issues: write
18
pull-requests: write
19
- actions: write
20
contents: read
21
models: read
+ # A caller can only cap a reusable workflow's permissions, never raise them,
22
+ # so `actions: write` has to be granted here for the dispatch job downstream
23
+ # to work at all. The reusable workflow narrows it to that single job, so the
24
+ # `pull_request_target` job does not receive it. Removing it here breaks
25
+ # dispatching (see #271/#272); narrow it there instead.
26
+ actions: write
27
28
jobs:
29
issue-triage:
0 commit comments