Record the mirror token's workflow permission constraint #6

Merged
hannah-vernon merged 1 commit from docs/mirror-token-note into dev 2026-09-09 15:36:04 -05:00

The push mirror token holds only Contents: Read and write. GitHub rejects pushes touching .github/workflows without Workflows: Read and write, so adding a workflow would stop the mirror for a reason unrelated to the workflow itself.

The push mirror token holds only Contents: Read and write. GitHub rejects pushes touching .github/workflows without Workflows: Read and write, so adding a workflow would stop the mirror for a reason unrelated to the workflow itself.
The push mirror authenticates with a fine-grained token holding only
Contents: Read and write.  GitHub separately rejects any push touching
.github/workflows unless the token also holds Workflows: Read and write,
so adding a workflow here would stop the mirror with a permissions error
that has nothing to do with the workflow itself.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
hannah-vernon/agent-session-checkpoints!6
No description provided.