fix(ci): add pull-requests:write to gate-check-v3 permissions (mc#) #729

Merged
core-qa merged 2 commits from ci/gate-check-v3-permissions-fix into main 2026-05-12 14:31:14 +00:00

View File

@ -32,6 +32,14 @@ on:
# iterating all open PRs when PR_NUMBER is empty.
workflow_dispatch:
permissions:
# read: contents — for checkout (base ref, not PR head for security)
# read: pull-requests — for reading PR info via API
# write: pull-requests — for posting/updating gate-check comments
# Without this the token cannot POST/PATCH /issues/comments → 403.
contents: read
pull-requests: write
env:
GITHUB_SERVER_URL: https://git.moleculesai.app