From 84f84bdd06148875486d6db94c5a336a893c376f Mon Sep 17 00:00:00 2001 From: Lasse Benninga Date: Tue, 2 Jun 2026 16:36:45 +0200 Subject: [PATCH] fix(ci): grant contents: read so the grade workflow loads The reusable workflow at HackYourFuture/github-actions/.github/workflows/auto-grade.yml@main contains a nested job that requests 'contents: read' (to checkout the PR code). The caller job here only granted issues + pull-requests, which caps every other permission at 'none'. Result: every PR fails to load the grade workflow with The nested job 'test' is requesting 'contents: read', but is only allowed 'contents: none'. Adding 'contents: read' to the caller's permissions block unblocks the nested checkout step. No other behaviour changes. Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/grade-assignment.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/grade-assignment.yml b/.github/workflows/grade-assignment.yml index d06dc2d..3fd4b9c 100644 --- a/.github/workflows/grade-assignment.yml +++ b/.github/workflows/grade-assignment.yml @@ -8,6 +8,7 @@ on: jobs: grade: permissions: + contents: read issues: write pull-requests: write uses: HackYourFuture/github-actions/.github/workflows/auto-grade.yml@main