From 522f8e5fab077e0fcfa79d533e47f13daf86d007 Mon Sep 17 00:00:00 2001 From: Filip Skokan Date: Thu, 22 Oct 2026 08:48:03 +0200 Subject: [PATCH] tools: grant CI workflows Actions read permission The workflow run metadata query in node-core-utils requires Actions read permission for GITHUB_TOKEN. Grant it to the commit queue and automatic CI jobs. Refs: https://github.com/nodejs/node-core-utils/pull/1192 Signed-off-by: Filip Skokan --- .github/workflows/auto-start-ci.yml | 1 + .github/workflows/commit-queue.yml | 1 + 2 files changed, 2 insertions(+) diff --git a/.github/workflows/auto-start-ci.yml b/.github/workflows/auto-start-ci.yml index 85f3e92f2ffb..3c7872baab7d 100644 --- a/.github/workflows/auto-start-ci.yml +++ b/.github/workflows/auto-start-ci.yml @@ -54,6 +54,7 @@ jobs: BATCH_SIZE: ${{ vars.AUTO_START_CI_BATCH_SIZE || '5' }} start-ci: permissions: + actions: read checks: read contents: read pull-requests: write diff --git a/.github/workflows/commit-queue.yml b/.github/workflows/commit-queue.yml index 83f921838b30..520b0239ff44 100644 --- a/.github/workflows/commit-queue.yml +++ b/.github/workflows/commit-queue.yml @@ -59,6 +59,7 @@ jobs: needs: get_candidate_prs if: needs.get_candidate_prs.outputs.candidates != '' permissions: + actions: read checks: read contents: read pull-requests: read