From c6025a5a4b3fa2ad16f7e0d3ebd846c36f5ab12b Mon Sep 17 00:00:00 2001 From: WenyXu Date: Wed, 23 Sep 2026 12:22:21 +0000 Subject: [PATCH] fix(ci): grant PR write permission for CI command replies Signed-off-by: WenyXu --- .github/workflows/ci-slash.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci-slash.yml b/.github/workflows/ci-slash.yml index e9fb392d381..059654fd5cd 100644 --- a/.github/workflows/ci-slash.yml +++ b/.github/workflows/ci-slash.yml @@ -8,7 +8,7 @@ permissions: actions: write contents: read issues: write - pull-requests: read + pull-requests: write jobs: admit: @@ -64,7 +64,7 @@ jobs: PR_NUMBER: ${{ steps.admit.outputs.pr_number || github.event.client_payload.github.payload.issue.number }} ADMIT_OUTCOME: ${{ steps.admit.outcome }} DISPATCH_OUTCOME: ${{ steps.dispatch.outcome }} - # Use the issue-comment endpoint with the existing issues: write permission. + # PR replies require pull-requests: write even through the issue-comment endpoint. run: | [[ "${PR_NUMBER}" =~ ^[0-9]+$ ]] || exit 1 if [[ "${ADMIT_OUTCOME}" == failure || "${DISPATCH_OUTCOME}" == failure ]]; then