Skip to content

ci: grant pull-requests:read so lint-pr-title workflow starts#31

Merged
kinyoklion merged 1 commit into
mainfrom
devin/1778261671-fix-lint-pr-title-permissions
May 8, 2026
Merged

ci: grant pull-requests:read so lint-pr-title workflow starts#31
kinyoklion merged 1 commit into
mainfrom
devin/1778261671-fix-lint-pr-title-permissions

Conversation

@kinyoklion
Copy link
Copy Markdown
Member

@kinyoklion kinyoklion commented May 8, 2026

Requirements

  • I have added test coverage for new or changed functionality — N/A (CI workflow change only)
  • I have followed the repository's pull request submission guidelines
  • I have validated my changes against all supported platform versions — N/A (CI workflow change only)

Related issues

Describe the solution you've provided

Adds permissions: pull-requests: read at the workflow level in .github/workflows/lint-pr-title.yml.

A reusable workflow can only request a subset of the permissions the caller has granted. Since this caller had no permissions block, the reusable workflow's pull-requests: read request could not be satisfied, causing every run to hit startup_failure.

Describe alternatives you've considered

Reverting the permission declaration in the reusable workflow itself, but that would remove a security improvement (least-privilege scoping) across all consumers.

Additional context

No product code is changed. The Lint PR title check on this PR itself should exit success rather than startup_failure, confirming the fix.

Link to Devin session: https://app.devin.ai/sessions/c7b96da5c9074500aa684bc9a9ba1c31
Requested by: @kinyoklion


Note

Low Risk
Low risk: CI-only change that expands workflow permissions to pull-requests: read so the reusable lint-pr-title workflow can run; no product code or data paths are affected.

Overview
Fixes the Lint PR title GitHub Actions workflow startup failure by explicitly granting workflow-level permissions: pull-requests: read, allowing the called reusable lint-pr-title workflow to request and use PR read access.

Reviewed by Cursor Bugbot for commit 27c25bf. Bugbot is set up for automated code reviews on this repo. Configure here.

@devin-ai-integration
Copy link
Copy Markdown
Contributor

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

  • Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
  • Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

  • Disable automatic comment and CI monitoring

@kinyoklion kinyoklion marked this pull request as ready for review May 8, 2026 18:02
@kinyoklion kinyoklion requested a review from a team as a code owner May 8, 2026 18:02
@kinyoklion kinyoklion merged commit a01d985 into main May 8, 2026
9 checks passed
@kinyoklion kinyoklion deleted the devin/1778261671-fix-lint-pr-title-permissions branch May 8, 2026 18:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants