From 4d48d3670f27ac040d08ed90f5cf32bff44dd459 Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 8 Sep 2026 16:23:43 +0100 Subject: [PATCH] fix(ci): grant actions: read so the governance reusable can start The reusable at the pinned standards revision requires actions: read. A caller granting only contents: read dies at startup and reports NO governance checks at all, silently disarming the whole gate (0 checks instead of 15). Verified on bofig: run 34200437178 at the patched head reported all 15 governance jobs; before the patch the run was startup_failure with zero checks. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01QMTyDv9CoJo5PfeNzyp519 --- .github/workflows/governance.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml index 9341181..5bc2917 100644 --- a/.github/workflows/governance.yml +++ b/.github/workflows/governance.yml @@ -9,6 +9,7 @@ on: workflow_dispatch: permissions: + actions: read contents: read jobs: