oscerd opened a new pull request, #9062: URL: https://github.com/apache/camel-quarkus/pull/9062
Fixes #9059. `camel-master-cron.yaml` and `quarkus-master-cron.yaml` were the only two workflows in `.github/workflows/` without a `permissions:` block, so their jobs ran with the repository default token scope while building code cloned from another repository. This adds a top-level `permissions: contents: read` and scopes each job to what it actually needs: - Every job runs the build-notification step, and `tooling/scripts/report-build-status.groovy` calls `issue.reopen()`, `issue.comment()` and `issue.close()` on the tracking issue — so each job carries `issues: write`. - `handle-build-status` additionally runs `git push --force-with-lease origin <branch>`, so it carries `contents: write`. The change is purely additive (48 lines, no existing lines touched) and follows the pattern already used in `jdk25-build.yaml` and the other workflows that declare permissions. 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
