fix: widen permissions on filter step
Metadata
Current evaluation
Merged PR canonical/setup-multiarch#184 added `pull-requests: read` to the filter step's permissions block, fixing private-repo filter failures caused by the action's `contents: read` overriding consumers' permissions.
Resolution: closed resolved
Reason: PR #184 by maintainer bepri was merged (approved by 2 reviewers, all CI checks green, +1/-0 line). It widens the filter step's permissions to include `pull-requests: read`, resolving issue #183 (`lint-python`: private repos can't read PR files), which is now closed.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Fixes an issue on private repositories where the `filter` step fails due to missing `permissions: pull-requests: read`. Since we have `contents: read` set here, it overrides any `permissions:` block added by the downstream consumer of the action, and therefore the fix had to go here.
Fixes #183.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR canonical/setup-multiarch#184 added `pull-requests: read` to the filter step's permissions block, fixing private-repo filter failures caused by the action's `contents: read` overriding consumers' permissions. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR canonical/setup-multiarch#184 granted the filter step pull-requests: read, fixing private-repository filter failures caused by the action’s overriding permissions. | |
| qwen/qwen3.6-35b-a3b |
Impact:
55
Quick Win:
42
Complexity:
5
Confidence:
85
Actionability:
80
|
needs review | Adds missing pull-requests: read permission to the filter step, fixing failures on private repositories. CI passing, awaiting review. |
Update history
| Date | Change |
|---|---|
| closed | |
| updated | |
| created |
Related work
-
Duplicate Of:
canonical/starflow#183
(confidence 90%)
PR body states 'Fixes #183'; that issue reported private repos failing the paths-filter step due to missing `pull-requests: read` and is now closed.
Related issues
No related issues found above the similarity threshold.