From 27d7bfba50451261dd46d3d483b10eaed1607ea9 Mon Sep 17 00:00:00 2001 From: igneum-labs <337424239+igneum-labs@users.noreply.github.com> Date: Tue, 6 Oct 2026 21:20:10 +0000 Subject: [PATCH] red watcher job: actions:read on its token, so the recorded line names the failed job and step (the first real red run, windows-ci at 21:19Z, got 403 from the jobs API and recorded no step) Co-Authored-By: Claude Fable 5.1 --- .github/workflows/ci.yml | 3 +++ .github/workflows/windows.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0efaddd2e..2f0805968 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -87,6 +87,9 @@ jobs: if: ${{ failure() && (github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/heads/release-')) }} runs-on: [self-hosted, linux, x64, igneum-build-1] timeout-minutes: 5 + permissions: + actions: read # the run's jobs API (the first real red run, 21:19Z: the default token answered 403 and the line carried no step) + contents: read steps: - uses: actions/checkout@v4 with: diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml index cfe19eeed..82aa2f60c 100644 --- a/.github/workflows/windows.yml +++ b/.github/workflows/windows.yml @@ -302,6 +302,9 @@ jobs: if: ${{ failure() && (github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/heads/release-')) }} runs-on: [self-hosted, linux, x64, igneum-build-1] timeout-minutes: 5 + permissions: + actions: read # the run's jobs API (the first real red run, 21:19Z: the default token answered 403 and the line carried no step) + contents: read steps: - uses: actions/checkout@v4 with: