diff options
| author | Yuriy Andamasov <yuriy@vyos.io> | 2026-05-30 23:01:10 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-05-30 23:01:10 +0300 |
| commit | 600903ffd8c8eddc28b86b7822797330c5730559 (patch) | |
| tree | 07f770b9e35ff4dda56708f17e0b8fb317fddd88 /.github | |
| parent | fd9d9f36de57d63a5ab6435342cc432f73f4d338 (diff) | |
| download | ipaddrcheck-600903ffd8c8eddc28b86b7822797330c5730559.tar.gz ipaddrcheck-600903ffd8c8eddc28b86b7822797330c5730559.zip | |
T8943: revert(mirror-rollout-2): restore post-1b wrapper on ipaddrcheck (#34)
PR #33 broke this consumer's mirror with startup_failure. Root cause:
GitHub's reusable-workflow permissions model. The canonical stub set
permissions: contents:read but the central reusable workflow declares
contents:write/pull-requests:write/issues:write at top level. Per docs:
'If you specify the access for any of these scopes at a level less
than the permissions defined by the called workflow, the entire
workflow will fail.'
Restoring the post-1b wrapper while we update the canonical stub
design (either drop central's top-level permissions block, or keep
write perms in the wrapper).
🤖 Generated by [robots](https://vyos.io)
Diffstat (limited to '.github')
| -rw-r--r-- | .github/workflows/pr-mirror-repo-sync.yml | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/.github/workflows/pr-mirror-repo-sync.yml b/.github/workflows/pr-mirror-repo-sync.yml index 0f16633..5320e01 100644 --- a/.github/workflows/pr-mirror-repo-sync.yml +++ b/.github/workflows/pr-mirror-repo-sync.yml @@ -6,7 +6,7 @@ name: PR Mirror and Repo Sync on: pull_request_target: types: [closed] - branches: [rolling, production] + branches: [rolling] workflow_dispatch: inputs: sync_branch: @@ -14,13 +14,16 @@ on: type: string permissions: - contents: read + contents: write + pull-requests: write + issues: write jobs: call: if: | github.repository_owner == 'vyos' && (github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch') + && vars.MIRROR_ENABLED != 'false' uses: vyos/.github/.github/workflows/pr-mirror-repo-sync.yml@production with: sync_branch: ${{ inputs.sync_branch || github.event.pull_request.base.ref }} |