Skip to content

ci: grant pull-requests:read so lint-pr-title workflow starts#181

Merged
kinyoklion merged 1 commit intomainfrom
devin/1778261671-fix-lint-pr-title-permissions
May 8, 2026
Merged

ci: grant pull-requests:read so lint-pr-title workflow starts#181
kinyoklion merged 1 commit intomainfrom
devin/1778261671-fix-lint-pr-title-permissions

Conversation

@kinyoklion
Copy link
Copy Markdown
Member

@kinyoklion kinyoklion commented May 8, 2026

Requirements

  • I have added test coverage for new or changed functionality — N/A (CI workflow change only)
  • I have followed the repository's pull request submission guidelines
  • I have validated my changes against all supported platform versions — N/A (CI workflow change only)

Related issues

Describe the solution you've provided

Adds permissions: pull-requests: read at the workflow level in .github/workflows/lint-pr-title.yml.

A reusable workflow can only request a subset of the permissions the caller has granted. Since this caller had no permissions block, the reusable workflow's permission request could not be satisfied, causing every run to hit startup_failure.

Describe alternatives you've considered

The permission could be reverted in the reusable workflow instead, but that would remove a security improvement (least-privilege scoping) across all consumers.

Additional context

No product code is changed. The only verification needed is that the Lint PR title check on this PR itself passes rather than hitting startup_failure.

Link to Devin session: https://app.devin.ai/sessions/c7b96da5c9074500aa684bc9a9ba1c31
Requested by: @kinyoklion


Note

Low Risk
Low risk CI-only change that only adjusts workflow permissions to fix a startup failure; no product code or data handling is affected.

Overview
Fixes Lint PR title workflow startup failures by adding an explicit workflow-level permissions: pull-requests: read, allowing the called reusable workflow to request PR read access.

Reviewed by Cursor Bugbot for commit 1e52be0. Bugbot is set up for automated code reviews on this repo. Configure here.

@devin-ai-integration
Copy link
Copy Markdown
Contributor

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

  • Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
  • Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

  • Disable automatic comment and CI monitoring

@kinyoklion kinyoklion marked this pull request as ready for review May 8, 2026 18:03
@kinyoklion kinyoklion requested a review from a team as a code owner May 8, 2026 18:03
@kinyoklion kinyoklion merged commit 7cc3d9b into main May 8, 2026
44 checks passed
@kinyoklion kinyoklion deleted the devin/1778261671-fix-lint-pr-title-permissions branch May 8, 2026 20:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants