From 2fa58ecd7fd6fbff1c39f7a39ebaf939b810aece Mon Sep 17 00:00:00 2001 From: Kevin Veen-Birkenbach Date: Sun, 29 Mar 2026 18:07:14 +0200 Subject: [PATCH] fix(ci): set actions: write in all entry and orchestrator workflows Required so cancel-on-failure jobs in reusable workflows can call the GitHub API to cancel the run. Permissions propagate down the workflow_call chain and must be write at every level. Co-Authored-By: Claude Sonnet 4.6 --- .github/workflows/ci-orchestrator.yml | 2 +- .github/workflows/entry-manual.yml | 2 +- .github/workflows/entry-pull-request.yml | 2 +- .github/workflows/entry-push-latest.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci-orchestrator.yml b/.github/workflows/ci-orchestrator.yml index 7ffefd8b17..08c3789d5b 100644 --- a/.github/workflows/ci-orchestrator.yml +++ b/.github/workflows/ci-orchestrator.yml @@ -28,7 +28,7 @@ concurrency: cancel-in-progress: false permissions: - actions: read + actions: write contents: read packages: write security-events: write diff --git a/.github/workflows/entry-manual.yml b/.github/workflows/entry-manual.yml index 8084321a86..43949fd301 100644 --- a/.github/workflows/entry-manual.yml +++ b/.github/workflows/entry-manual.yml @@ -23,7 +23,7 @@ permissions: contents: read packages: write security-events: write - actions: read + actions: write jobs: ci-orchestrator: diff --git a/.github/workflows/entry-pull-request.yml b/.github/workflows/entry-pull-request.yml index a024166cf9..f64a27bb7a 100644 --- a/.github/workflows/entry-pull-request.yml +++ b/.github/workflows/entry-pull-request.yml @@ -22,7 +22,7 @@ concurrency: cancel-in-progress: true permissions: - actions: read + actions: write contents: read packages: write security-events: write diff --git a/.github/workflows/entry-push-latest.yml b/.github/workflows/entry-push-latest.yml index e0ebc1d4eb..db856ec9e9 100644 --- a/.github/workflows/entry-push-latest.yml +++ b/.github/workflows/entry-push-latest.yml @@ -15,7 +15,7 @@ on: permissions: contents: write packages: write - actions: read + actions: write security-events: write jobs: