🌱 Add assignment-helper workflow

[clubanderson]

Adds assignment-helper using shared workflow from infra.

Generated with Claude Code

[kubestellar-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign nirrozenbaum for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

To fix the problem, explicitly declare the GITHUB_TOKEN permissions for this workflow, rather than relying on the repository defaults. The safest general approach is to add a permissions: block either at the workflow root (applies to all jobs) or under the specific job. Since this workflow only has one job and delegates logic to a reusable workflow, the best fix here is to add a restrictive permissions block at the job level for assignment-helper. As we cannot see what the reusable workflow requires, a conservative but commonly safe baseline is contents: read, which allows the job to read repository contents but not push, and can be expanded in the future if the reusable workflow needs more (e.g., issues: write).

Concretely, in .github/workflows/assignment-helper.yml, update the assignment-helper job definition (around line 8–9) to include a permissions: section before the uses: line. No imports or additional definitions are required, just YAML changes. For example, add:

    permissions:
      contents: read

between assignment-helper: and uses: .... This explicitly restricts the GITHUB_TOKEN for this job while preserving existing functionality in most typical “assignment helper” scenarios that only need to read repo data and comments.

[github-actions]

Thank you for your contribution! Your PR has been successfully merged.

We'd love to hear your thoughts to help improve KubeStellar.
Please take a moment to fill out our short feedback survey:

https://kubestellar.io/survey