Skip to content

Grant TagBot the token permissions its reusable workflow requests - #62

Merged
ChrisRackauckas merged 1 commit into
mainfrom
tagbot-permissions
Oct 13, 2026
Merged

ChrisRackauckas merged 1 commit into
mainfrom
tagbot-permissions

Conversation

@ChrisRackauckas

@ChrisRackauckas ChrisRackauckas commented Oct 13, 2026 •

Copy link
Copy Markdown
Member

🚧 UNREVIEWED — awaiting review by @ChrisRackauckas. Filed by an AI agent running as @ChrisRackauckas; Chris has not seen this.
Harness: Devin CLI 3000.11.3 · Model: Fusion (Claude Opus 5.5 Medium + SWE-2 Medium)
Conversation: local transcript ~/.local/share/devin/cli/transcripts/flash-hour.json

This repo's default workflow token is read-only, so every TagBot run since the v1 thin caller was added has ended in startup_failure — most recently https://github.com/SciML/SparseMatrixIdentification.jl/actions/runs/32871076508.

This PR grants the job-level permissions the shared reusable workflow SciML/.github/.github/workflows/tagbot.yml@v1 requests (including contents: write), so GitHub will start the run and TagBot can tag releases. The change is identical to SciML/ADTypes.jl#188.

Test plan: the workflow file can't run until merged; verify with a workflow_dispatch run after merge.


🤖 Posted by an AI agent — harness: Devin CLI 3000.11.3 · model: Fusion (Claude Opus 5.5 Medium + SWE-2 Medium)
Conversation: local transcript ~/.local/share/devin/cli/transcripts/flash-hour.json

This repo's default GITHUB_TOKEN is read-only, so TagBot runs fail with startup_failure when the reusable workflow requests contents: write. Grant the permissions the reusable workflow declares.

Co-Authored-By: Chris Rackauckas <accounts@chrisrackauckas.com>
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Agent-Harness: Devin CLI 3000.11.3
Agent-Model: Fusion (Claude Opus 5.5 Medium + SWE-2 Medium)
Agent-Session: local Devin session ID grizzled-gazelle (not a URL)
@ChrisRackauckas
ChrisRackauckas marked this pull request as ready for review October 13, 2026 00:23
@ChrisRackauckas
ChrisRackauckas merged commit 99dcd78 into main Oct 13, 2026
14 checks passed
@ChrisRackauckas
ChrisRackauckas deleted the tagbot-permissions branch October 13, 2026 00:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant