From ea0ffb7906cb020609d3c02e0a997ab4be3d34bf Mon Sep 17 00:00:00 2001 From: Claude Date: Sat, 5 Sep 2026 08:09:50 +0000 Subject: [PATCH] ci: grant pull-requests read permission to PR title workflow The Conventional Commits workflow calls the reusable workflow appium/appium-workflows/.github/workflows/pr-title.yml, whose conventional-pr-check job declares `permissions: pull-requests: read`. A called workflow can never hold more permissions than its caller. This caller declared no `permissions:` block, so it inherited the repository's restricted default GITHUB_TOKEN scopes (pull-requests: none) and GitHub rejected the run at parse time with a startup_failure: The nested job 'conventional-pr-check' is requesting 'pull-requests: read', but is only allowed 'pull-requests: none'. Declare the minimum scopes explicitly so the check runs regardless of the repository's default workflow permissions setting. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01KeCzb8yu8DPk9wa292irps --- .github/workflows/pr-title.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml index 929df1336..5f598f5cd 100644 --- a/.github/workflows/pr-title.yml +++ b/.github/workflows/pr-title.yml @@ -3,6 +3,10 @@ on: pull_request: types: [opened, edited, synchronize, reopened] +permissions: + contents: read + pull-requests: read + jobs: lint: uses: appium/appium-workflows/.github/workflows/pr-title.yml@main