From aada5e0545f70adf1f60e93fa7168c560cc84849 Mon Sep 17 00:00:00 2001 From: Mike Harder Date: Thu, 24 Jul 2025 06:35:49 +0000 Subject: [PATCH 1/2] [verify-run-status] Add actions:read permission --- .github/workflows/_reusable-verify-run-status.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/_reusable-verify-run-status.yaml b/.github/workflows/_reusable-verify-run-status.yaml index ab08c8788506..274c88b10c71 100644 --- a/.github/workflows/_reusable-verify-run-status.yaml +++ b/.github/workflows/_reusable-verify-run-status.yaml @@ -16,6 +16,7 @@ on: type: string permissions: + actions: read checks: read contents: read From 8e7b6a39b6fdb7c26a582a8888561e0df0ab302c Mon Sep 17 00:00:00 2001 From: Mike Harder Date: Thu, 24 Jul 2025 06:40:49 +0000 Subject: [PATCH 2/2] [watch] Add actions:read to all watch workflows --- .github/workflows/watch-breakingchange-crossversion.yaml | 1 + .github/workflows/watch-breakingchange.yaml | 1 + .github/workflows/watch-modelvalidation.yaml | 1 + .github/workflows/watch-semanticvalidation.yaml | 1 + 4 files changed, 4 insertions(+) diff --git a/.github/workflows/watch-breakingchange-crossversion.yaml b/.github/workflows/watch-breakingchange-crossversion.yaml index 69e4c50eacc0..2b12bdeb5032 100644 --- a/.github/workflows/watch-breakingchange-crossversion.yaml +++ b/.github/workflows/watch-breakingchange-crossversion.yaml @@ -13,6 +13,7 @@ on: - "\\[TEST-IGNORE\\] Breaking Change(Cross-Version) - Set Status" permissions: + actions: read checks: read contents: read diff --git a/.github/workflows/watch-breakingchange.yaml b/.github/workflows/watch-breakingchange.yaml index 9c14cbe57cb2..0794842e53b5 100644 --- a/.github/workflows/watch-breakingchange.yaml +++ b/.github/workflows/watch-breakingchange.yaml @@ -13,6 +13,7 @@ on: - "\\[TEST-IGNORE\\] Swagger BreakingChange - Set Status" permissions: + actions: read checks: read contents: read diff --git a/.github/workflows/watch-modelvalidation.yaml b/.github/workflows/watch-modelvalidation.yaml index a5d13ce232c6..577b7fb8a3f7 100644 --- a/.github/workflows/watch-modelvalidation.yaml +++ b/.github/workflows/watch-modelvalidation.yaml @@ -13,6 +13,7 @@ on: - "\\[TEST-IGNORE\\] Swagger ModelValidation" permissions: + actions: read checks: read contents: read diff --git a/.github/workflows/watch-semanticvalidation.yaml b/.github/workflows/watch-semanticvalidation.yaml index cba8cce1ead1..80dc315e8716 100644 --- a/.github/workflows/watch-semanticvalidation.yaml +++ b/.github/workflows/watch-semanticvalidation.yaml @@ -13,6 +13,7 @@ on: - "\\[TEST-IGNORE\\] Swagger SemanticValidation" permissions: + actions: read checks: read contents: read