Fix workflow compilation by changing write permissions to read #13732

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

pelikhan merged 4 commits into main from copilot/fix-compiler-workflows

Feb 4, 2026

pkg/cli/workflows/example-blocked-domains.lock.yml

Large diffs are not rendered by default.

pkg/cli/workflows/example-campaign.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -4,12 +4,14 @@ on: @@
     permissions:
       contents: read
       actions: read
-      issues: write
+      issues: read
     tracker-id: example-fingerprint-2024
     safe-outputs:
       create-issue:
         title-prefix: "[Example] "
         labels: [example, automated]
+    features:
+      dangerous-permissions-write: true
     ---
     # Example Fingerprint Workflow
@@ Expand Down @@

pkg/cli/workflows/shared/jqschema.md

-Original file line number
+Diff line change
@@ -0,0 +1,5 @@
+    # jqschema utility
+    This is a placeholder for the jqschema utility import.
+    The jqschema.sh script should be used to extract JSON structure and type information.

pkg/cli/workflows/shared/mcp/svelte.md

-Original file line number
+Diff line change
@@ -0,0 +1,9 @@
+    # Svelte MCP Server Configuration
+    This is a placeholder for Svelte MCP server configuration.
+    The Svelte MCP server provides tools for:
+    - Listing Svelte documentation sections
+    - Retrieving documentation
+    - Analyzing components with svelte-autofixer
+    - Generating playground links

pkg/cli/workflows/shared/secret-redaction-test.md

-Original file line number
+Diff line change
@@ -0,0 +1,5 @@
+    # Secret Redaction Test
+    This is a placeholder for secret redaction test steps.
+    The workflow will search for and replace the pattern "password123" with "REDACTED" in all files under /tmp/gh-aw/.

pkg/cli/workflows/test-assign-to-user.md

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -17,16 +17,17 @@ on:
  
    permissions:

      actions: write

      contents: write

      issues: write

      contents: read

      issues: read

    engine: copilot

    timeout-minutes: 5

    safe-outputs:

      assign-to-user:

        max: 5

    strict: false

    features:

      dangerous-permissions-write: true

    ---

    # Assign to User Test Workflow

pkg/cli/workflows/test-claude-add-issue-comment.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on:
       workflow_dispatch:
     permissions:
-      issues: write
+      issues: read
     engine: claude
     ---
@@ Expand Down @@

pkg/cli/workflows/test-claude-add-issue-labels.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on:
       workflow_dispatch:
     permissions:
-      issues: write
+      issues: read
     engine: claude
     ---
@@ Expand Down @@

pkg/cli/workflows/test-claude-create-issue.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on:
       workflow_dispatch:
     permissions:
-      issues: write
+      issues: read
     engine: claude
     ---
@@ Expand Down @@

pkg/cli/workflows/test-claude-create-pull-request-review-comment.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on:
       workflow_dispatch:
     permissions:
-      pull-requests: write
+      pull-requests: read
     engine: claude
     ---
@@ Expand Down @@

pkg/cli/workflows/test-claude-create-pull-request.md

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -2,8 +2,8 @@
  
    on:

      workflow_dispatch:

    permissions:

      pull-requests: write

      contents: write

      pull-requests: read

      contents: read

    engine: claude

    ---

pkg/cli/workflows/test-claude-create-repository-security-advisory.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -4,6 +4,8 @@ on: @@
     permissions:
       security-events: write
     engine: claude
+    features:
+      dangerous-permissions-write: true
     ---
     # Test Claude Create Repository Security Advisory
@@ Expand Down @@

pkg/cli/workflows/test-claude-max-patch-size.md

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -2,8 +2,8 @@
  
    on:

      workflow_dispatch:

    permissions:

      contents: write

      pull-requests: write

      contents: read

      pull-requests: read

    engine: claude

    safe-outputs:

      max-patch-size: 512  # Limit patches to 512 KB for testing

pkg/cli/workflows/test-claude-mcps-custom.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on: issues
     permissions:
       contents: read
-      issues: write
+      issues: read
     engine: claude
     mcp-servers:
       # New direct field format - stdio with command
@@ Expand Down @@

pkg/cli/workflows/test-claude-noop.md

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -6,8 +6,8 @@ on:
  
    permissions:

      contents: read

      actions: read

      issues: write

      pull-requests: write

      issues: read

      pull-requests: read

    engine: claude

    safe-outputs:

      noop:

pkg/cli/workflows/test-claude-patch-size-exceeded.md

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -2,8 +2,8 @@
  
    on:

      workflow_dispatch:

    permissions:

      contents: write

      pull-requests: write

      contents: read

      pull-requests: read

    engine: claude

    safe-outputs:

      max-patch-size: 1  # Very small limit (1 KB) to test failure case

pkg/cli/workflows/test-claude-playwright-accessibility-contrast.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on:
       workflow_dispatch:
     permissions:
-      issues: write
+      issues: read
     engine: claude
     tools:
       playwright:
@@ Expand Down @@

pkg/cli/workflows/test-claude-push-to-pull-request-branch.md

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -2,8 +2,8 @@
  
    on:

      workflow_dispatch:

    permissions:

      contents: write

      pull-requests: write

      contents: read

      pull-requests: read

    engine: claude

    ---

pkg/cli/workflows/test-claude-update-issue.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on:
       workflow_dispatch:
     permissions:
-      issues: write
+      issues: read
     engine: claude
     ---
@@ Expand Down @@

pkg/cli/workflows/test-codex-add-issue-comment.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on:
       workflow_dispatch:
     permissions:
-      issues: write
+      issues: read
     engine: codex
     ---
@@ Expand Down @@

pkg/cli/workflows/test-codex-add-issue-labels.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on:
       workflow_dispatch:
     permissions:
-      issues: write
+      issues: read
     engine: codex
     ---
@@ Expand Down @@

pkg/cli/workflows/test-codex-noop.md

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -6,8 +6,8 @@ on:
  
    permissions:

      contents: read

      actions: read

      issues: write

      pull-requests: write

      issues: read

      pull-requests: read

    engine: codex

    safe-outputs:

      noop:

pkg/cli/workflows/test-copilot-add-issue-comment.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on:
       workflow_dispatch:
     permissions:
-      issues: write
+      issues: read
     engine: copilot
     ---
@@ Expand Down @@

pkg/cli/workflows/test-copilot-add-issue-labels.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on:
       workflow_dispatch:
     permissions:
-      issues: write
+      issues: read
     engine: copilot
     ---
@@ Expand Down @@

pkg/cli/workflows/test-copilot-create-issue.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on:
       workflow_dispatch:
     permissions:
-      issues: write
+      issues: read
     engine: copilot
     ---
@@ Expand Down @@

pkg/cli/workflows/test-copilot-create-pull-request-review-comment.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on:
       workflow_dispatch:
     permissions:
-      pull-requests: write
+      pull-requests: read
     engine: copilot
     ---
@@ Expand Down @@

pkg/cli/workflows/test-copilot-create-pull-request.md

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -2,8 +2,8 @@
  
    on:

      workflow_dispatch:

    permissions:

      pull-requests: write

      contents: write

      pull-requests: read

      contents: read

    engine: copilot

    ---

pkg/cli/workflows/test-copilot-create-repository-security-advisory.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -4,6 +4,8 @@ on: @@
     permissions:
       security-events: write
     engine: copilot
+    features:
+      dangerous-permissions-write: true
     ---
     # Test Copilot Create Repository Security Advisory
@@ Expand Down @@

pkg/cli/workflows/test-copilot-imports.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on: issues
     permissions:
       contents: read
-      issues: write
+      issues: read
     engine: copilot
     ---
@@ Expand Down @@

pkg/cli/workflows/test-copilot-max-patch-size.md

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -2,8 +2,8 @@
  
    on:

      workflow_dispatch:

    permissions:

      contents: write

      pull-requests: write

      contents: read

      pull-requests: read

    engine: copilot

    safe-outputs:

      max-patch-size: 512  # Limit patches to 512 KB for testing

pkg/cli/workflows/test-copilot-mcps-custom.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on: issues
     permissions:
       contents: read
-      issues: write
+      issues: read
     engine: copilot
     mcp-servers:
       # New direct field format - stdio with command
@@ Expand Down @@

pkg/cli/workflows/test-copilot-noop.md

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -6,8 +6,8 @@ on:
  
    permissions:

      contents: read

      actions: read

      issues: write

      pull-requests: write

      issues: read

      pull-requests: read

    engine: copilot

    safe-outputs:

      noop:

pkg/cli/workflows/test-copilot-patch-size-exceeded.md

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -2,8 +2,8 @@
  
    on:

      workflow_dispatch:

    permissions:

      contents: write

      pull-requests: write

      contents: read

      pull-requests: read

    engine: copilot

    safe-outputs:

      max-patch-size: 1  # Very small limit (1 KB) to test failure case

pkg/cli/workflows/test-copilot-push-to-pull-request-branch.md

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -2,8 +2,8 @@
  
    on:

      workflow_dispatch:

    permissions:

      contents: write

      pull-requests: write

      contents: read

      pull-requests: read

    engine: copilot

    ---

pkg/cli/workflows/test-copilot-update-issue.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on:
       workflow_dispatch:
     permissions:
-      issues: write
+      issues: read
     engine: copilot
     ---
@@ Expand Down @@

pkg/cli/workflows/test-jqschema.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -5,6 +5,7 @@ on: @@
       workflow_dispatch:
     permissions:
       contents: read
+    strict: false
     engine: copilot
     timeout-minutes: 5
     imports:
@@ Expand Down @@

pkg/cli/workflows/test-mcp-imports.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -2,7 +2,7 @@ @@
     on: issues
     permissions:
       contents: read
-      issues: write
+      issues: read
     engine: copilot
     imports:
@@ Expand Down @@

pkg/cli/workflows/test-secret-masking.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -5,6 +5,7 @@ permissions: @@
       contents: read
       issues: read
       pull-requests: read
+    strict: false
     engine: copilot
     imports:
       - shared/secret-redaction-test.md
@@ Expand Down @@

pkg/cli/workflows/test-svelte.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -7,6 +7,7 @@ permissions: @@
       contents: read
       issues: read
       pull-requests: read
+    strict: false
     engine: copilot
     timeout-minutes: 5
     imports:
@@ Expand Down @@

pkg/cli/workflows/test-template-issue-context.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -4,7 +4,7 @@ on: @@
         types: [opened]
     permissions:
       contents: read
-      issues: write
+      issues: read
     engine:
       id: copilot
     tools:
@@ Expand Down @@

pkg/cli/workflows/test-template-pr-context.md

-Original file line number
+Diff line change
@@ Expand Up / @@ -4,7 +4,7 @@ on: @@
         types: [opened, synchronize]
     permissions:
       contents: read
-      pull-requests: write
+      pull-requests: read
     engine:
       id: claude
     tools:
@@ Expand Down @@

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fix workflow compilation by changing write permissions to read #13732

Uh oh!

Diff view

Diff view

There are no files selected for viewing

Uh oh!

Uh oh!