From 600903ffd8c8eddc28b86b7822797330c5730559 Mon Sep 17 00:00:00 2001 From: Yuriy Andamasov Date: Sat, 30 May 2026 23:01:10 +0300 Subject: T8943: revert(mirror-rollout-2): restore post-1b wrapper on ipaddrcheck (#34) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit PR #33 broke this consumer's mirror with startup_failure. Root cause: GitHub's reusable-workflow permissions model. The canonical stub set permissions: contents:read but the central reusable workflow declares contents:write/pull-requests:write/issues:write at top level. Per docs: 'If you specify the access for any of these scopes at a level less than the permissions defined by the called workflow, the entire workflow will fail.' Restoring the post-1b wrapper while we update the canonical stub design (either drop central's top-level permissions block, or keep write perms in the wrapper). 🤖 Generated by [robots](https://vyos.io) --- .github/workflows/pr-mirror-repo-sync.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pr-mirror-repo-sync.yml b/.github/workflows/pr-mirror-repo-sync.yml index 0f16633..5320e01 100644 --- a/.github/workflows/pr-mirror-repo-sync.yml +++ b/.github/workflows/pr-mirror-repo-sync.yml @@ -6,7 +6,7 @@ name: PR Mirror and Repo Sync on: pull_request_target: types: [closed] - branches: [rolling, production] + branches: [rolling] workflow_dispatch: inputs: sync_branch: @@ -14,13 +14,16 @@ on: type: string permissions: - contents: read + contents: write + pull-requests: write + issues: write jobs: call: if: | github.repository_owner == 'vyos' && (github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch') + && vars.MIRROR_ENABLED != 'false' uses: vyos/.github/.github/workflows/pr-mirror-repo-sync.yml@production with: sync_branch: ${{ inputs.sync_branch || github.event.pull_request.base.ref }} -- cgit v1.2.3