From f7e66aa1ff4e61d566a9ec1836fd63f421fe8179 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pawe=C5=82=20Gronowski?= Date: Wed, 19 Aug 2026 17:44:49 +0200 Subject: [PATCH] gha: Grant PR review permissions required by v2.0.3 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit `docker-agent-action` v2.0.3 requires callers of its reusable PR review workflow to grant `actions: write` for review-lock cache cleanup and feedback artifacts. Earlier releases required only `actions: read`. See: https://github.com/docker/docker-agent-action#pr-review-workflow Signed-off-by: Paweł Gronowski --- .github/workflows/pr-review.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pr-review.yml b/.github/workflows/pr-review.yml index ebf79df1c119..c508ca74c657 100644 --- a/.github/workflows/pr-review.yml +++ b/.github/workflows/pr-review.yml @@ -18,6 +18,6 @@ jobs: issues: write # Create security incident issues if secrets detected checks: write # (Optional) Show review progress as a check run id-token: write # Required for OIDC authentication to AWS Secrets Manager - actions: read # Download artifacts from trigger workflow + actions: write # Required since v2.0.3 — review-lock cache cleanup and feedback artifacts with: trigger-run-id: ${{ github.event_name == 'workflow_run' && format('{0}', github.event.workflow_run.id) || '' }}