Fix PR comment: add permissions and AEM_AUTHOR_URL env for github-script

Author: sfc-gh-stopchiy

.github/workflows/publish-skill-to-aem.yml

@@ -11,6 +11,10 @@ on:
         description: 'Commit SHA to checkout'
         required: true
         type: string
+      pr_number:
+        description: 'PR number for commenting (optional, omit for merge runs)'
+        required: false
+        type: number
     secrets:
       AEM_USERNAME:
         required: true
@@ -158,3 +162,33 @@ jobs:
             -d "cmd=Activate" \
             -d "path=${cf_path}"
           echo "✅ CF replicated"
+
+      - name: Comment PR with staging link
+        if: ${{ inputs.pr_number != 0 }}
+        uses: actions/github-script@v7
+        env:
+          AEM_AUTHOR_URL: ${{ secrets.AEM_AUTHOR_URL }}
+        with:
+          script: |
+            const skillName = '${{ inputs.skill_name }}';
+            const cfPath = '/content/dam/snowflake-site/en/content-fragments/skills-library/' + skillName;
+            const authorUrl = process.env.AEM_AUTHOR_URL;
+            const cfLink = `${authorUrl}/ui#/aem/editor.html${cfPath}`;
+
+            const body = `## ✅ Skill Staged to AEM
+
+**Skill:** \`${skillName}\`
+
+👉 **AEM Staging CF:** [Open in AEM Author](${cfLink})
+
+> Content Fragment has been created/updated and replicated to the staging publish instance.
+
+---
+*Generated by GitHub Actions*`;
+
+            await github.rest.issues.createComment({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: ${{ inputs.pr_number }},
+              body
+            });

.github/workflows/stage-skills-on-pr.yml

@@ -9,6 +9,10 @@ on:
 jobs:
   detect_changes:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      issues: write
+      pull-requests: write
     outputs:
       skills_json: ${{ steps.detect.outputs.skills_json }}
       has_changes: ${{ steps.detect.outputs.has_changes }}
@@ -56,6 +60,7 @@ jobs:
     with:
       skill_name: ${{ matrix.skill.name }}
       commit_sha: ${{ github.event.pull_request.head.sha }}
+      pr_number: ${{ github.event.pull_request.number }}
     secrets:
       AEM_USERNAME: ${{ secrets.AEM_USERNAME_STAGING }}
       AEM_PASSWORD: ${{ secrets.AEM_PASSWORD_STAGING }}