SnapOtter

mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00

Files

T

SnapOtter 03c1a5e36f fix(ci): grant ai-bundles reusable call its required token scopes

The Release workflow failed at startup ("workflow file issue", no jobs
created) whenever dispatched. Root cause: release.yml sets top-level
`permissions: {}`, so the ai-bundles reusable-workflow call inherited an
empty scope set. ai-bundles.yml's jobs declare `contents: read` /
`packages: read`, and GitHub rejects a called workflow requesting scopes
the caller never granted -- validated at startup, before any job runs, so
the whole run fails immediately regardless of the job's `if:`.

Grant the two scopes on the call job. Confirmed on a throwaway branch: a
neutralized dispatch went from startup_failure to a clean run with
ai-bundles correctly skipped.

This unblocks every real release; main's release.yml could not start.

2026-06-17 18:22:15 +08:00

actions/setup

fix(security): comprehensive security audit and hardening

2026-05-13 21:33:50 +08:00

DISCUSSION_TEMPLATE

chore(github): redesign issue intake forms and routing

2026-06-17 14:21:18 +08:00

ISSUE_TEMPLATE

chore(github): redesign issue intake forms and routing

2026-06-17 14:21:18 +08:00

workflows

fix(ci): grant ai-bundles reusable call its required token scopes