From 2db6fa530aab4ef7314ae9ec099428a3f5b7f6f9 Mon Sep 17 00:00:00 2001 From: shenxianpeng Date: Mon, 6 Jul 2026 22:40:43 +0300 Subject: [PATCH] fix: add missing issues:write permission for PR autolabeler The reusable workflow (commit-check/.github/.github/workflows/pr-labeler.yml) requires 'issues: write' permission because the release-drafter autolabeler uses the Issues API to set labels on PRs. When a caller invokes a reusable workflow with 'permissions: {}' at the top level and only 'pull-requests: write' + 'contents: read' at the job level, 'issues' defaults to 'none'. The reusable workflow cannot escalate its permissions beyond what the caller grants, causing a startup_failure. This adds 'issues: write' to the caller job-level permissions so the reusable workflow's GITHUB_TOKEN can create PR labels. --- .github/workflows/labeler.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index fdcef89..d02a718 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -11,5 +11,6 @@ jobs: draft-release: permissions: pull-requests: write + issues: write contents: read uses: commit-check/.github/.github/workflows/pr-labeler.yml@main