From 64657dc4c5644244ceebe1a27c667174b82c479a Mon Sep 17 00:00:00 2001 From: shreyah963 Date: Tue, 19 May 2026 22:33:58 -0700 Subject: [PATCH 1/2] Add issues write permission to untriaged label workflow Signed-off-by: shreyah963 --- .github/workflows/add-untriaged.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/add-untriaged.yml b/.github/workflows/add-untriaged.yml index 864fd26d..cca80bfb 100644 --- a/.github/workflows/add-untriaged.yml +++ b/.github/workflows/add-untriaged.yml @@ -4,6 +4,9 @@ on: issues: types: [opened, reopened, transferred] +permissions: + issues: write + jobs: apply-label: runs-on: ubuntu-latest From 0bfc86f58a289b5f754e136b9a27a61789f2a6e6 Mon Sep 17 00:00:00 2001 From: shreyah963 Date: Thu, 21 May 2026 12:26:27 -0700 Subject: [PATCH 2/2] Pin actions/github-script to exact commit SHA Signed-off-by: shreyah963 --- .github/workflows/add-untriaged.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/add-untriaged.yml b/.github/workflows/add-untriaged.yml index cca80bfb..846441ed 100644 --- a/.github/workflows/add-untriaged.yml +++ b/.github/workflows/add-untriaged.yml @@ -11,7 +11,7 @@ jobs: apply-label: runs-on: ubuntu-latest steps: - - uses: actions/github-script@v7 + - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 with: script: | github.rest.issues.addLabels({