From a32c60d3e73ef8b73d32ab60af1e5f4c81e2ab29 Mon Sep 17 00:00:00 2001 From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com> Date: Wed, 1 Jul 2026 21:41:42 +0100 Subject: [PATCH] fix(intake): grant job-scoped contents:write so the inbox push works again MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit hypatia-dispatch-intake.yml declares workflow-level 'permissions: contents: read' yet its intake job pushes received events to the findings-submissions branch — every run since 2026-06-27 died 403 ('Permission to hyperpolymath/gitbot-fleet.git denied to github-actions[bot]'), silently dropping all inbound hypatia work orders (last successful intake 2026-06-23). Job-scoped 'contents: write' (workflow default stays read) restores the fleet's only live inbound channel — the cheapest fan-in repair for the estate keystone hypatia#369 (unwired dispatch). Co-Authored-By: Claude Fable 5 --- .github/workflows/hypatia-dispatch-intake.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/hypatia-dispatch-intake.yml b/.github/workflows/hypatia-dispatch-intake.yml index 4e853409..2157eba9 100644 --- a/.github/workflows/hypatia-dispatch-intake.yml +++ b/.github/workflows/hypatia-dispatch-intake.yml @@ -17,6 +17,8 @@ jobs: intake: runs-on: ubuntu-latest timeout-minutes: 10 + permissions: + contents: write # push received events to the findings-submissions inbox branch steps: - name: Checkout gitbot-fleet uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v4