summaryrefslogtreecommitdiff
path: root/.github/workflows
diff options
context:
space:
mode:
authorYuriy Andamasov <yuriy@vyos.io>2026-05-26 01:44:33 +0300
committerYuriy Andamasov <yuriy@vyos.io>2026-05-26 01:44:33 +0300
commitb68287666d84016090175d24a88ca2a424aae131 (patch)
tree617681d86c8454fc28f46b8df7ec49a9ad30cdbb /.github/workflows
parent5b4565466ecfb6b3079ce4e35a28b28eb08dee88 (diff)
downloadmirror-canary-b68287666d84016090175d24a88ca2a424aae131.tar.gz
mirror-canary-b68287666d84016090175d24a88ca2a424aae131.zip
fix(canary): expand wrapper permissions to match reusable
Plan template's 'permissions: contents: read' is insufficient; reusable declares contents/pull-requests/issues all write. Existing prod wrappers use full permissions. Adopt convention. Caught at runs 26422487063, 26422563526, 26422679283 (startup_failure).
Diffstat (limited to '.github/workflows')
-rw-r--r--.github/workflows/pr-mirror-repo-sync.yml4
1 files changed, 3 insertions, 1 deletions
diff --git a/.github/workflows/pr-mirror-repo-sync.yml b/.github/workflows/pr-mirror-repo-sync.yml
index f935a51..2af8465 100644
--- a/.github/workflows/pr-mirror-repo-sync.yml
+++ b/.github/workflows/pr-mirror-repo-sync.yml
@@ -17,7 +17,9 @@ on:
type: string
permissions:
- contents: read
+ contents: write
+ pull-requests: write
+ issues: write
jobs:
call: