Hacktoberfest 2026:维护者为十月标记出来的 issue,仍然开放、适合新手。 浏览 Hacktoberfest issue

[workshop-sync] side-quest-13-01-pr-labeler-pattern.md: invalid add-labels schema and disallowed write permission

已关闭 适合新手
#4,045 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看

维护者通常 1 天内回复

还没有人认领这个 Issue。

评估

难度
1/5
预计耗时
1 小时以内
新手友好度
92/100
Issue 类型
缺陷
描述清晰度
描述清楚
活跃度
活跃
技术栈
github-actions, markdown, yaml
领域
documentation

调研方向

打开 workshop/side-quest-13-01-pr-labeler-pattern.md,并检查 .github/workflows/pr-labeler.md 中的 frontmatter 示例。按说明替换无效的 add-labels 字段,并移除不允许的写入权限,然后在 strict mode 下运行 gh aw compile --validate。当示例编译时没有错误或警告,即表示完成。

由索引模型根据 Issue 内容生成。

描述

documentation

Workshop file reviewed

workshop/side-quest-13-01-pr-labeler-pattern.md

Problem

The example workflow frontmatter in this file fails to compile with the current gh-aw CLI (v0.89.21) for two reasons:

  1. Invalid add-labels field limit:

    safe-outputs:
      add-labels:
        limit: 5
    

    Compiling this with gh aw compile --validate produces:

    error: Unknown property: limit. Valid fields are: allowed, allowed-repos, blocked, create-if-missing, github-app, github-token, issue-intent, issues, max, pull-requests, ...
    
  2. Disallowed write permission alongside safe-outputs:

    permissions:
      pull-requests: write
      contents: read
    

    Compiling in strict mode (the workshop's default/recommended mode) produces:

    error: strict mode: write permission 'pull-requests: write' is not allowed for security reasons. Use 'safe-outputs.create-issue', 'safe-outputs.create-pull-request', 'safe-outputs.add-comment', or 'safe-outputs.update-issue' to perform write operations safely.
    

Both errors were reproduced directly by compiling the exact snippet from the file with gh aw compile --validate.

Current correct syntax

  • The add-labels safe output uses the field max, not limit, to cap the number of labels applied.
  • permissions: should not declare pull-requests: write when safe-outputs.add-labels is used — safe-outputs performs the write on the agent's behalf and only read-level permissions are needed in the job. See https://github.github.com/gh-aw/reference/safe-outputs/

A corrected frontmatter block:

---
name: PR Labeler
on:
  pull_request:
    types: [opened, synchronize]
permissions:
  contents: read
safe-outputs:
  add-labels:
    max: 5
---

This was verified to compile successfully with gh aw compile --validate (no errors or warnings).

Suggested fix

In the .github/workflows/pr-labeler.md example inside the workshop file:

  • Replace limit: 5 with max: 5 under safe-outputs.add-labels.
  • Remove pull-requests: write from the permissions: block, keeping only contents: read.

Generated by 🔍 Workshop Sync Check · copilot · auto · 204.5 AIC · ⌖ 6.8 AIC · ⊞ 9.2K · ◷

  • expires on Oct 2, 2026, 8:58 AM UTC
主要语言
JavaScript
星标
55
派生
36
平均合并
2 天 8 小时
30 天内合并 PR
17

环境准备

在 Codespaces 中打开

在浏览器里用你自己的 GitHub 账号启动这个项目的开发容器。

  • 没有 Dockerfile 或 Docker Compose 文件
  • 没有 Pull Request 模板
  • 没有贡献指南

从这里开始

  1. 先读完整个 Issue,再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库,在一个分支上完成修改。
  4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

githubnext/gh-aw-workshop 的其他 Issue

查看 githubnext/gh-aw-workshop 的全部 Issue

相似的 Issue

更多 JavaScript Issue

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。