From 8ce7ca140117ffb4c12a3464302fbf2098485bce Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 8 Sep 2026 16:23:54 +0100 Subject: [PATCH] fix(ci): grant actions: read so the governance reusable can start The reusable at the pinned standards revision requires actions: read. A caller granting only contents: read dies at startup and reports NO governance checks at all, silently disarming the whole gate (0 checks instead of 15). Verified on bofig: run 34200437178 at the patched head reported all 15 governance jobs; before the patch the run was startup_failure with zero checks. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01QMTyDv9CoJo5PfeNzyp519 --- .github/workflows/governance.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index 2a6aa70..94d73ee 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -27,6 +27,7 @@ concurrency: cancel-in-progress: true permissions: + actions: read contents: read jobs: