[workshop-sync] workshop/side-quest-13-02-pr-summary-pattern.md: agent job uses write permission

Closed Beginner friendly
#5,153 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
1/5
Estimated time
Under an hour
Newbie friendliness
85/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Active
Tech stack
github-actions, javascript
Domain
ci-cd

Research direction

Open workshop/side-quest-13-02-pr-summary-pattern.md and compare its permissions with the guidance in github-agentic-workflows.md. Change the agent job's pull-requests permission to read, keep safe-outputs: add-comment, then run gh aw compile to validate the workflow.

Written by the indexing model from the issue text.

Description

documentation

Workshop file reviewed

workshop/side-quest-13-02-pr-summary-pattern.md (gh-aw v1.0.1)

Problem

The example frontmatter grants write access to the agent job:

permissions:
pull-requests: write

Current correct syntax

The gh-aw reference guidance (github-agentic-workflows.md) says: "add-comment needs pull-requests: read to inspect a PR, not pull-requests: write". Safe-output writes run in separate jobs with their own permissions. Strict mode, which is the default, refuses write permissions.

Suggested fix

Change pull-requests: write to pull-requests: read. Keep safe-outputs: add-comment. Re-validate with gh aw compile.

Generated by 🔍 Workshop Sync Check · copilot · auto · ~21 AIC · ⌖ ~1 AIC · ⊞ 4.7K · ◷

  • expires on Oct 31, 2026, 8:04 AM UTC
Dominant language
JavaScript
Stars
56
Forks
40
Avg merge
2d 15h
Merged PRs (30d)
14

Getting set up

Open in Codespaces

Starts the project's dev container in your browser, under your own GitHub account.

  • No Dockerfile or Docker Compose file
  • No pull request template
  • No contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from githubnext/gh-aw-workshop

All issues in githubnext/gh-aw-workshop

Similar issues

More JavaScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.