File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1818# ⛔ The token this run WRITES with is the App installation token step 3
1919# mints — narrowed to the payload's repository (and, for a `transfer` stroke
2020# alone, that transfer's one target too: `transferIssue` needs issues write on
21- # both ends) and to the permissions the op table declares (`issues: write`, `pull-requests: write`, the
22- # `contents: write` GitHub's auto-merge mutations require, and the
23- # `metadata: read` the sender gate's permission read needs) — and revoked by
24- # that action's post step. The workflow's own `GITHUB_TOKEN` gets nothing
21+ # both ends) and to the permissions the op table declares (`issues: write`,
22+ # `pull-requests: write`, the ` contents: write` GitHub's auto-merge mutations
23+ # require, and the `metadata: read` the sender gate's permission read needs)
24+ # — and revoked by that action's post step. The workflow's own `GITHUB_TOKEN` gets nothing
2525# (`permissions: {}` below); the job grants it `contents: read` for the
2626# checkout and nothing else, so the run's ONLY write path is the App token,
2727# and it exists only inside the execute step's environment.
Original file line number Diff line number Diff line change @@ -1290,10 +1290,9 @@ let selfTestReachedVerdict = false;
12901290 * five board tools, the token minter (its one POST creates no content, but a
12911291 * write verb is a write verb and the roster below is mechanical), the
12921292 * card-creation door, the card-transfer door, and the two halves of the
1293- * fleet-write relay — the
1294- * seat-side dispatcher (its one POST is the `repository_dispatch` that
1295- * carries a stroke) and the runner-side executor (the writes that stroke asked
1296- * for, paced on the runner's own log).
1293+ * fleet-write relay — the seat-side dispatcher (its one POST is the
1294+ * `repository_dispatch` that carries a stroke) and the runner-side executor
1295+ * (the writes that stroke asked for, paced on the runner's own log).
12971296 *
12981297 * Spelled REPO-RELATIVE, because the dispatch derivation reads every
12991298 * separator-bearing literal in a gate's source as a path lead: a bare
You can’t perform that action at this time.
0 commit comments