From 69dec47637ac6fcdc06036e98cc3907f3f736959 Mon Sep 17 00:00:00 2001
From: Nivedit Jain <40313233+NiveditJain@users.noreply.github.com>
Date: Tue, 14 Jul 2026 08:10:15 +0000
Subject: [PATCH] fix(ci): scope version-bot token to platform

---
 .github/workflows/bump-platform-submodule.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/bump-platform-submodule.yml b/.github/workflows/bump-platform-submodule.yml
index 5e70baad5..c7574839b 100644
--- a/.github/workflows/bump-platform-submodule.yml
+++ b/.github/workflows/bump-platform-submodule.yml
@@ -32,6 +32,10 @@ jobs:
         with:
           app-id: ${{ secrets.VERSION_BOT_APP_ID }}
           private-key: ${{ secrets.VERSION_BOT_PRIVATE_KEY }}
+          # Without an explicit owner/repository, the action scopes the token
+          # to this repository, which cannot checkout the private platform repo.
+          owner: FailproofAI
+          repositories: platform
 
       - name: Checkout FailproofAI/platform main
         uses: actions/checkout@v7