From 1b4deb58f7296dbec3b55cbf5b3931035b7f4331 Mon Sep 17 00:00:00 2001 From: Imran Siddique Date: Fri, 25 Sep 2026 20:10:50 -0700 Subject: [PATCH] ci: drop the unused statuses scope from the maintainer approval gate Co-Authored-By: Claude Opus 5.5 --- .github/workflows/require-maintainer-approval.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/require-maintainer-approval.yml b/.github/workflows/require-maintainer-approval.yml index decd34c..7e1b023 100644 --- a/.github/workflows/require-maintainer-approval.yml +++ b/.github/workflows/require-maintainer-approval.yml @@ -9,12 +9,15 @@ on: permissions: contents: read - pull-requests: read - statuses: write jobs: gate: runs-on: ubuntu-latest + # Reads the PR and its reviews, then fails the job if no maintainer + # approved the head commit. It writes nothing, so no write scope. + permissions: + contents: read + pull-requests: read if: github.event.pull_request.base.ref == 'main' steps: - name: Check for maintainer approval