From 1f53550d331182f5ce84d70da1e90d4d58dd91cb Mon Sep 17 00:00:00 2001 From: ChrisRackauckas-Claude Date: Thu, 17 Sep 2026 09:13:59 -0400 Subject: [PATCH] ci: declare docs-workflow token permissions explicitly The reusable documentation workflow requests actions, contents, pull-requests, and statuses write permissions, and a caller must grant at least that set or the run fails closed at startup. Fixes the empty startup_failure on recent docs runs. Co-Authored-By: Chris Rackauckas Agent-Harness: OpenCode Agent-Model: muse-spark-1.3-contributor-free Agent-Session: local session at /home/crackauc/sandbox/tmp_20260917_040834_91074 (no public conversation URL) --- .github/workflows/Documentation.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/workflows/Documentation.yml b/.github/workflows/Documentation.yml index 62b9ba4..80b24ad 100644 --- a/.github/workflows/Documentation.yml +++ b/.github/workflows/Documentation.yml @@ -5,6 +5,16 @@ on: - main tags: ['*'] pull_request: + +# The reusable documentation workflow requests these permissions for its +# build job; declare them here so the call starts even when the repo's +# default GITHUB_TOKEN permissions are read-only. +permissions: + actions: write + contents: write + pull-requests: write + statuses: write + concurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: ${{ startsWith(github.ref, 'refs/pull/') }}