From a5ad3ee88a88001b72443c821fc56716a00ec262 Mon Sep 17 00:00:00 2001 From: shreyah963 Date: Tue, 19 May 2026 22:40:11 -0700 Subject: [PATCH 1/2] Add issues write permission to untriaged label workflow Signed-off-by: shreyah963 --- .github/workflows/add-untriaged.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/add-untriaged.yml b/.github/workflows/add-untriaged.yml index 15b9a5565..391d1548a 100644 --- a/.github/workflows/add-untriaged.yml +++ b/.github/workflows/add-untriaged.yml @@ -4,6 +4,9 @@ on: issues: types: [opened, reopened, transferred] +permissions: + issues: write + jobs: apply-label: runs-on: ubuntu-latest From 93f754bf09817692c442c42187db193c8cb52ce3 Mon Sep 17 00:00:00 2001 From: shreyah963 Date: Thu, 21 May 2026 10:31:22 -0700 Subject: [PATCH 2/2] Pin actions/github-script to exact commit SHA Signed-off-by: shreyah963 --- .github/workflows/add-untriaged.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/add-untriaged.yml b/.github/workflows/add-untriaged.yml index 391d1548a..846441edf 100644 --- a/.github/workflows/add-untriaged.yml +++ b/.github/workflows/add-untriaged.yml @@ -11,7 +11,7 @@ jobs: apply-label: runs-on: ubuntu-latest steps: - - uses: actions/github-script@v6 + - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 with: script: | github.rest.issues.addLabels({