From 7111126a978f9b1fa5071331a7627c9c83daf78a Mon Sep 17 00:00:00 2001 From: Ziya Suzen Date: Thu, 9 Apr 2026 11:34:23 +0100 Subject: [PATCH] ci: add contents and actions read permissions to Claude workflow claude-code-action needs contents:read and actions:read on the GITHUB_TOKEN to restore trusted config files from the base branch (security feature added in v1.0.75). --- .github/workflows/claude.yml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index c95ad1b4f..a9329adff 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -1,6 +1,11 @@ name: Claude Code -permissions: {} +# GITHUB_TOKEN needs contents:read and actions:read — required by +# claude-code-action for restoring trusted config files from the base branch. +# All other GitHub API access uses the App token. +permissions: + contents: read + actions: read on: issue_comment: