GitNexus/.github/workflows
Gergő Magyar 37a39c2962 fix(ci): unblock the review agent dispatch and publisher lanes (#2567)
* fix(ci): unblock the review agent dispatch and publisher lanes

The first workflow_dispatch validation run surfaced two defects:

- setup-node rejects `cache: false` (the YAML boolean arrives as the
  string 'false' and v6 fails with "Caching for 'false' is not
  supported"), killing the analyze job before the isolation preflight.
  Omitting the input is the supported way to disable caching.
- The publisher held only `issues: write`, but GITHUB_TOKEN needs
  `pull-requests: write` to create issue comments on a pull request,
  so even the safe-failure comment died with "Resource not accessible
  by integration".

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Va5uu9Ar3e45QZ5xFsG4AZ

* test(ci): align the publisher permission contract with PR commenting

The workflow contract test pinned the publisher to pull-requests: read,
which is exactly the permission set that made comment publication fail.
Encode the corrected scope and assert the publisher still cannot write
repository contents.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Va5uu9Ar3e45QZ5xFsG4AZ

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2026-07-19 16:36:22 +01:00
..
build-tree-sitter-prebuilds.yml chore(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1 (#2406) 2026-07-09 06:51:04 +01:00
ci-devcontainer.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
ci-e2e.yml chore(deps): bump dorny/paths-filter from 4.0.1 to 4.0.2 (#2505) 2026-07-16 07:02:56 +01:00
ci-quality.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
ci-report.yml chore(deps): bump marocchino/sticky-pull-request-comment (#2537) 2026-07-17 13:20:48 +01:00
ci-tests.yml feat(skills): GitNexus Engineering Tool Kits (#2566) 2026-07-19 15:07:24 +01:00
ci.yml refactor(ingestion): delete legacy call-resolution DAG + heritage processor (RING4-1, #942) (#2023) 2026-06-04 11:07:37 +01:00
claude.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
codeql.yml chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.0 (#2506) 2026-07-17 11:40:51 +01:00
commit-fork-prebuilds.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
dependency-review.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
docker.yml chore(deps): bump docker/metadata-action from 6.1.0 to 6.2.0 (#2536) 2026-07-17 13:21:05 +01:00
gitleaks.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
gitnexus-review-agent.yml fix(ci): unblock the review agent dispatch and publisher lanes (#2567) 2026-07-19 16:36:22 +01:00
grammar-update-monitor.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
impact-pdg-mutation-report.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
pr-autofix-apply.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
pr-autofix-publish.yml feat(autofix): replace inline reviewdog with /autofix ChatOps button (#1458) 2026-05-09 16:32:38 +01:00
pr-autofix.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
pr-description-check.yml chore(deps): bump actions/github-script from 7.0.1 to 9.0.0 2026-04-15 20:17:08 +00:00
pr-labeler.yml chore(deps): bump release-drafter/release-drafter from 7.4.0 to 7.5.1 (#2398) 2026-07-09 06:48:55 +01:00
publish.yml feat(skills): GitNexus Engineering Tool Kits (#2566) 2026-07-19 15:07:24 +01:00
scorecard.yml chore(deps): bump github/codeql-action/upload-sarif (#2535) 2026-07-17 13:21:25 +01:00
skill-sync.yml feat(skills): GitNexus Engineering Tool Kits (#2566) 2026-07-19 15:07:24 +01:00
tree-sitter-upgrade-readiness.yml chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2292) 2026-06-25 06:53:47 +01:00
triage-sweep.yml chore(deps): bump actions/cache from 5.0.5 to 6.1.0 (#2351) 2026-07-02 07:11:57 +01:00
trivy.yml chore(deps): bump github/codeql-action/upload-sarif (#2535) 2026-07-17 13:21:25 +01:00
workflow-lint.yml chore(deps): bump github/codeql-action/upload-sarif (#2535) 2026-07-17 13:21:25 +01:00