Skip to content

fix(workflows): add id-token permission for validate-request workflow#76

Merged
MarkusNeusinger merged 1 commit intomainfrom
fix/validate-request-permissions
Dec 1, 2025
Merged

fix(workflows): add id-token permission for validate-request workflow#76
MarkusNeusinger merged 1 commit intomainfrom
fix/validate-request-permissions

Conversation

@MarkusNeusinger
Copy link
Copy Markdown
Owner

Summary

  • Add missing id-token: write permission to bot-validate-request.yml
  • Required for Claude Code action's OIDC authentication

Test

Copilot AI review requested due to automatic review settings December 1, 2025 16:06
@MarkusNeusinger MarkusNeusinger merged commit f5e6530 into main Dec 1, 2025
4 checks passed
@MarkusNeusinger MarkusNeusinger deleted the fix/validate-request-permissions branch December 1, 2025 16:06
@codecov
Copy link
Copy Markdown

codecov Bot commented Dec 1, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adds the id-token: write permission to the bot-validate-request.yml workflow, which is required for OIDC authentication when using the Claude Code action (anthropics/claude-code-action@v1). This aligns the workflow with the same pattern used in util-claude.yml, which also uses the Claude Code action and has the same permission.

Key changes:

  • Add missing id-token: write permission to enable OIDC authentication for Claude Code action

You can also share your feedback on Copilot code review for a chance to win a $100 gift card. Take the survey.

permissions:
contents: read
issues: write
id-token: write
Copy link

Copilot AI Dec 1, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The same id-token: write permission should also be added to .github/workflows/gen-library-impl.yml which uses the same anthropics/claude-code-action@v1 action (line 124) but is missing this permission. The util-claude.yml workflow already has this permission set correctly.

Copilot uses AI. Check for mistakes.
MarkusNeusinger added a commit that referenced this pull request Dec 1, 2025
…#76)

## Summary
- Add missing `id-token: write` permission to `bot-validate-request.yml`
- Required for Claude Code action's OIDC authentication

## Test
- Rerun validation on Issue #75 after merge
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants