From 42668d390dbbb40bf84880ea36e1963835903a69 Mon Sep 17 00:00:00 2001 From: Eran Cohen Date: Sun, 5 Jul 2026 19:17:17 +0300 Subject: [PATCH] OSAC-2050: fix resolve-pr job permissions for PR comment reactions The resolve-pr job had pull-requests: read, but adding reactions on PR comments requires pull-requests: write since GitHub routes PR comments through the pulls API. This caused the Acknowledge comment step to fail with HTTP 403, skipping the entire review pipeline. Assisted-by: Claude Code Signed-off-by: Eran Cohen --- .github/workflows/ep-review.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ep-review.yml b/.github/workflows/ep-review.yml index 589c3cba3..494d33d48 100644 --- a/.github/workflows/ep-review.yml +++ b/.github/workflows/ep-review.yml @@ -22,7 +22,7 @@ jobs: runs-on: ubuntu-latest permissions: issues: write - pull-requests: read + pull-requests: write outputs: pr_number: ${{ steps.resolve.outputs.pr_number }} head_sha: ${{ steps.resolve.outputs.head_sha }}