From 31b113296ae45fa3cc76498ac56ee7eaef3d9cfb Mon Sep 17 00:00:00 2001 From: Amadeusz Sadowski Date: Mon, 13 Jul 2026 20:39:01 +0200 Subject: [PATCH] fix: caller stub must grant the permissions report-check.yml requests Without job-level permissions on the calling job, repos with read-only default workflow permissions hit startup_failure. Found live on the pilot fork. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01KcYK8hmTmXi8eLWpg9LGKJ --- kit/callers/muster-report.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/kit/callers/muster-report.yml b/kit/callers/muster-report.yml index 4d4fc35..a8b111a 100644 --- a/kit/callers/muster-report.yml +++ b/kit/callers/muster-report.yml @@ -7,6 +7,12 @@ on: types: [created] jobs: report: + # A caller must grant every permission the reusable workflow requests, or the + # run dies with startup_failure ("requesting X but only allowed Y"). + permissions: + issues: write + contents: write + pull-requests: write uses: WarHub/muster/.github/workflows/report-check.yml@main with: data-source: "github:BSData/wh40k-11e" # ← repo-specific: your org/repo[@ref]