CI: fix /analyze command startup failure (#31762)

This commit is contained in:
andig 2026-07-13 17:48:05 +02:00 • committed by GitHub
parent 1f411e3dfd
commit 430ad4e194
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -30,14 +30,8 @@ jobs:
run:
name: Issue agent
runs-on: ubuntu-latest
# Superset of what either mode needs; the caller job scopes the token down
# (analyze grants only contents: read, so it cannot push or open PRs).
permissions:
contents: write
issues: write
pull-requests: write
id-token: write
actions: read
# No permissions block: inherit the caller's grant (triage=write to push
# fixes, analyze=read). A reusable job can only reduce, never elevate.
steps:
- name: Checkout repository
uses: actions/checkout@v7