Those action runs don't have access to the READ_RUNNERS_TOKEN secret, so they should just fall back to the namespace runner. Also, this PR removes the permission checks again. They are failing for some non-user authors (e.g. copilot) and could be removed anyways by a malicious actor in a PR. |
||
|---|---|---|
| .. | ||
| ISSUE_TEMPLATE | ||
| workflows | ||
| actionlint.yaml | ||
| dependabot.yml | ||
| PULL_REQUEST_TEMPLATE.md | ||