#17452: ci: Grant write perms for Issues for formal-conformance.yml
size: XS
Cluster:
GitHub Actions CI Improvements
This pull request makes a minor update to the GitHub Actions workflow configuration by adjusting permissions to ensure proper functionality.
* Updated the `.github/workflows/formal-conformance.yml` workflow to explicitly add `issues: write` permission, which is required for the workflow to function correctly.
That's it.
<!-- greptile_comment -->
<h3>Greptile Summary</h3>
Adds `issues: write` permission to the `formal-conformance.yml` workflow. This is required because the "Comment on PR" step (line 110-131) calls `github.rest.issues.createComment()` via `actions/github-script`, which needs the `issues: write` scope under GitHub's REST API. Without this permission, the step would fail with a 403 when drift is detected.
- Correct and minimal fix — the permission is necessary for the existing `createComment` call to succeed.
- One minor style note: the inline comment could be more descriptive about *why* the permission is needed.
<h3>Confidence Score: 5/5</h3>
- This PR is safe to merge — it adds a single necessary permission to an existing workflow.
- The change is a one-line addition of a required permission (`issues: write`) that the workflow already needs for its `createComment` API call. No new code paths, no security concerns beyond the intended permission grant, and the scope is minimal.
- No files require special attention.
<sub>Last reviewed commit: 707ccfd</sub>
<!-- greptile_other_comments_section -->
<sub>(5/5) You can turn off certain types of comments like style [here](https://app.greptile.com/review/github)!</sub>
<!-- /greptile_comment -->
Most Similar PRs
#11765: fix(ci): restrict GITHUB_TOKEN permissions in workflows
by coygeek · 2026-02-08
78.9%
#17426: ci(formal): don't fail on fork PRs when PR comment is blocked
by mitre88 · 2026-02-15
77.1%
#17621: fix: formal_conformance comment step should not fail job on fork PRs
by cmfinlan · 2026-02-16
76.6%
#5884: fix: curly lint errors and formal conformance fork permissions
by codearranger · 2026-02-01
75.7%
#22578: CI: enforce explicit workflow token permissions
by Rohan5commit · 2026-02-21
75.0%
#3885: Upgrade GitHub Actions to latest versions
by salmanmkc · 2026-01-29
73.0%
#3884: Upgrade GitHub Actions for Node 24 compatibility
by salmanmkc · 2026-01-29
70.3%
#9474: fix: GitHub Actions not pinned to SHA digests in CI/CD workflows
by coygeek · 2026-02-05
70.3%
#11048: fix: address repository issues (env, author, CI comments, security ...
by cavula · 2026-02-07
69.2%
#20319: fix(whisper-skill): set execute bit on transcribe.sh (fixes #9303)
by nikolasdehor · 2026-02-18
68.7%