Mirror token note #7

Merged

hannah-vernon merged 2 commits from dev into main

2026-09-09 15:36:07 -05:00

hannah-vernon commented

2026-09-09 15:36:05 -05:00

Owner

Brings main up to dev.

hannah-vernon added 2 commits

2026-09-09 15:36:05 -05:00

Record the mirror token's workflow permission constraint 0abb3daa5f

The push mirror authenticates with a fine-grained token holding only
Contents: Read and write.  GitHub separately rejects any push touching
.github/workflows unless the token also holds Workflows: Read and write,
so adding a workflow here would stop the mirror with a permissions error
that has nothing to do with the workflow itself.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Merge pull request 'Record the mirror token's workflow permission constraint' (#6 ) from docs/mirror-token-note into dev 6498ad553e