mirror of
https://github.com/wanderer-industries/wanderer
synced 2026-10-08 04:31:29 +00:00
#636 moved the test-results comment to a workflow_run workflow so fork PRs get a writable token. That part works -- the job log shows `Issues: write` granted -- but the POST still 403s. Commenting on a pull request needs the pull-requests scope too, even though the body goes to the issue-comments endpoint. GitHub says so in the response: x-accepted-github-permissions: issues=write; pull_requests=write #636 narrowed pull-requests to `read` on the reasoning that the comment is an issue comment; that holds for issues but not for PRs. The pre-#636 test.yml had `pull-requests: write`. Not verifiable before merge: workflow_run always runs the default branch's copy of this file, so the fix only takes effect once this lands on main.