From 0538760cda710427114b66db22874d5fbf1a8510 Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Mon, 21 Sep 2026 07:49:10 +0000
Subject: [PATCH] fix(ci): correct reusable-workflow caller permissions and
 inputs

---
 .github/workflows/governance.yml | 2 ++
 .github/workflows/mirror.yml     | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
index f0b7700..331bfe6 100644
--- a/.github/workflows/governance.yml
+++ b/.github/workflows/governance.yml
@@ -28,3 +28,5 @@ permissions:
 jobs:
   governance:
     uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@571cc734cd69fb846032ec77a662aa8ee4fc32cd
+      permissions:
+        actions: read
diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
index 9e27470..80b8f38 100644
--- a/.github/workflows/mirror.yml
+++ b/.github/workflows/mirror.yml
@@ -10,3 +10,5 @@ jobs:
   mirror:
     uses: hyperpolymath/standards/.github/workflows/mirror-reusable.yml@571cc734cd69fb846032ec77a662aa8ee4fc32cd
     secrets: inherit
+      permissions:
+        actions: read