Skip to content

Fix prow-action workflow permissions for issue commands#9776

Open
shubham-pampattiwar wants to merge 2 commits intovelero-io:mainfrom
shubham-pampattiwar:fix-prow-action-permissions
Open

Fix prow-action workflow permissions for issue commands#9776
shubham-pampattiwar wants to merge 2 commits intovelero-io:mainfrom
shubham-pampattiwar:fix-prow-action-permissions

Conversation

@shubham-pampattiwar
Copy link
Copy Markdown
Collaborator

@shubham-pampattiwar shubham-pampattiwar commented May 6, 2026

Summary

The prow-action workflow (/assign, /close, /reopen, /cc, etc.) was failing with:

Error: could not self assign: HttpError: Resource not accessible by integration

This happens because the workflow's GITHUB_TOKEN defaults to read-only permissions and lacks write access to issues and pull requests.

This PR adds an explicit permissions block to the workflow granting the minimum required access:

  • issues: write for /assign, /unassign, /close, /reopen, /milestone
  • pull-requests: write for /approve, /cc, /uncc, /hold

Does your change fix a particular issue?

N/A this is a CI/workflow fix, not tied to a specific feature issue.

Please indicate you've done the following:

The /assign, /close, /reopen, and other prow commands were failing with
"Resource not accessible by integration" because the workflow's GITHUB_TOKEN
lacked write permissions for issues and pull requests.

Add explicit permissions block to grant the minimum required access.

Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com>
@shubham-pampattiwar
Copy link
Copy Markdown
Collaborator Author

/kind changelog-not-required

@codecov
Copy link
Copy Markdown

codecov Bot commented May 6, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@kaovilai kaovilai added the kind/changelog-not-required PR does not require a user changelog. Often for docs, website, or build changes label May 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/changelog-not-required PR does not require a user changelog. Often for docs, website, or build changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants