Skip to content

docs: list actions: read in the Dependabot gate's usage example - #133

Merged
loks0n merged 1 commit into
mainfrom
dependabot-auto-merge-actions-read
Oct 28, 2026
Merged

loks0n merged 1 commit into
mainfrom
dependabot-auto-merge-actions-read

Conversation

@loks0n

@loks0n loks0n commented Oct 28, 2026

Copy link
Copy Markdown
Member

The usage comment in dependabot-auto-merge.yml left out actions: read. The gate needs it since #132 started listing the commit's workflow runs, and Hansi caught it on every caller PR. This only changes the comment.

🤖 Generated with Claude Code

The gate lists the commit's workflow runs, so a caller must grant it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@hansi-codes

hansi-codes Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

🟢 Tier S · Ready to merge

The added permission accurately documents the workflow's API usage and introduces no behavioral change.

Updated the reusable workflow's usage example to include the actions: read permission required when listing workflow runs. The example now shows the permissions needed by the gate alongside its existing checks, contents, pull-request, and status permissions.

Verdict New comments Fixed Still open
✅ Approved 0 0 0
📂 Walkthrough · 1
File Change
.github/workflows/dependabot-auto-merge.yml Added actions: read to the commented caller-workflow permissions example.

Reviewed 6de28b9 · Details · Comment @hansi-codes review to re-run, or mention @hansi-codes with a question.

@hansi-codes hansi-codes Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Tier S · Looks good to merge. Summary

@loks0n
loks0n merged commit 9c5284d into main Oct 28, 2026
1 check passed
@loks0n
loks0n deleted the dependabot-auto-merge-actions-read branch October 28, 2026 13:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant