From 04de48ef1ab13f016efd6d8a32ae4fefcd482434 Mon Sep 17 00:00:00 2001 From: ChrisRackauckas-Claude Date: Thu, 17 Sep 2026 09:07:25 -0400 Subject: [PATCH] ci: declare docs-workflow token permissions explicitly The reusable documentation workflow requests actions, contents, pull-requests, and statuses write permissions, and a caller must grant at least that set or the run fails closed at startup. Fixes the empty startup_failure on recent docs runs. Co-Authored-By: Chris Rackauckas Agent-Harness: OpenCode Agent-Model: muse-spark-1.3-contributor-free Agent-Session: local session at /home/crackauc/sandbox/tmp_20260917_040834_91074 (no public conversation URL) --- .github/workflows/Documentation.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/workflows/Documentation.yml b/.github/workflows/Documentation.yml index 3eb24a3..7365ab4 100644 --- a/.github/workflows/Documentation.yml +++ b/.github/workflows/Documentation.yml @@ -13,6 +13,15 @@ on: - main tags: ['*'] +# The reusable documentation workflow requests these permissions for its +# build job; declare them here so the call starts even when the repo's +# default GITHUB_TOKEN permissions are read-only. +permissions: + actions: write + contents: write + pull-requests: write + statuses: write + concurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: ${{ startsWith(github.ref, 'refs/pull/') }}