Skip to content

Fix missing required permissions in pr-review-fork example - #1820

Merged
v1v merged 1 commit into
mainfrom
fix/pr-review-fork-permissions-1819-6d28d85d4cf2748e
Aug 27, 2026
Merged

v1v merged 1 commit into
mainfrom
fix/pr-review-fork-permissions-1819-6d28d85d4cf2748e

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

Summary

This fixes the fork PR review trigger example so it grants all permissions required by the called reusable PR review workflow.

Changes

  • Added actions: read to gh-agent-workflows/pr-review-fork/example.yml
  • Added copilot-requests: write to gh-agent-workflows/pr-review-fork/example.yml

Why

The reusable workflow .github/workflows/gh-aw-pr-review.md requires both permissions. Without them, fork PR review runs fail deterministically due to insufficient permissions.

Validation

  • Confirmed the fork example now includes all required non-none permissions declared by the reusable workflow
  • Ran make compile successfully

Closes #1819

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

  • models.dev

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "models.dev"

See Network Configuration for more information.


What is this? | From workflow: Trigger Bug Hunter

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.

Add required permissions for the reusable PR review workflow in the fork trigger example by including actions: read and copilot-requests: write.

Closes #1819

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@v1v
v1v marked this pull request as ready for review August 27, 2026 09:14
@github-actions github-actions Bot added the medium_boom Medium PR blast radius; likely benefits from human review label Aug 27, 2026
@v1v
v1v merged commit b8a3b92 into main Aug 27, 2026
18 of 22 checks passed
@v1v
v1v deleted the fix/pr-review-fork-permissions-1819-6d28d85d4cf2748e branch August 27, 2026 11:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

medium_boom Medium PR blast radius; likely benefits from human review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[bug-hunter] PR Review (Fork) example omits required permissions for reusable workflow

1 participant