From a5f245c89f14544b8106ae845e630b76c641ce69 Mon Sep 17 00:00:00 2001 From: Michael Recachinas Date: Fri, 14 Aug 2026 09:26:14 -0400 Subject: [PATCH] Fix fork PR triage writer permissions Grant the writer workflow pull request write access and pin actions/github-script v9 to its immutable commit. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 512eb347-ec89-4250-8bf1-87048974b01d --- .github/workflows/explore-triage-commenter-writer.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/explore-triage-commenter-writer.yml b/.github/workflows/explore-triage-commenter-writer.yml index e1d8409e931..9e6574cd1d1 100644 --- a/.github/workflows/explore-triage-commenter-writer.yml +++ b/.github/workflows/explore-triage-commenter-writer.yml @@ -8,7 +8,7 @@ on: permissions: actions: read issues: write - pull-requests: read + pull-requests: write concurrency: group: explore-triage-commenter-writer-${{ github.event.workflow_run.head_repository.full_name || github.event.workflow_run.head_sha }}-${{ github.event.workflow_run.head_branch || github.event.workflow_run.head_sha }} @@ -110,7 +110,7 @@ jobs: - name: Upsert sticky comment if: steps.artifact.outputs.found == 'true' - uses: actions/github-script@v9 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 env: COMMENT_DATA_PATH: ${{ runner.temp }}/explore-triage/comment.json MARKER: ''