Commit f9aaa5f
authored
ci: grant pull-requests:read so lint-pr-title workflow starts (#63)
## Summary
Adds `permissions: pull-requests: read` at the workflow level in
`.github/workflows/lint-pr-title.yml`.
The reusable workflow at
`launchdarkly/gh-actions/.github/workflows/lint-pr-title.yml@main` was
updated (launchdarkly/gh-actions#86) to declare `permissions:
pull-requests: read` at the job level. A reusable workflow can only
request a subset of the permissions the caller grants, so without an
explicit `permissions` block in the caller, every run hits
`startup_failure`. Same fix as launchdarkly/sdk-meta#429.
## Review & Testing Checklist for Human
- [ ] Verify the `Lint PR title` workflow run on this PR exits `success`
rather than `startup_failure`
### Notes
No product code is changed — workflow-only permissions fix being applied
across SDK repos that use the reusable `lint-pr-title` workflow.
Link to Devin session:
https://app.devin.ai/sessions/c7b96da5c9074500aa684bc9a9ba1c31
Requested by: @kinyoklion
<!-- CURSOR_SUMMARY -->
---
> [!NOTE]
> **Low Risk**
> Low risk: workflow-only permission change that does not affect product
code. Main impact is whether the CI workflow can start and read PR
metadata.
>
> **Overview**
> Adds an explicit workflow-level `permissions: pull-requests: read` to
`.github/workflows/lint-pr-title.yml` so the reusable `lint-pr-title`
workflow can access PR metadata and avoid `startup_failure`.
>
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
ef319c9. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->1 parent b9fef8c commit f9aaa5f
1 file changed
Lines changed: 3 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
7 | 7 | | |
8 | 8 | | |
9 | 9 | | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
10 | 13 | | |
11 | 14 | | |
12 | 15 | | |
0 commit comments