From a59faef1b110cbd87836f13ba06c241b3e303e75 Mon Sep 17 00:00:00 2001 From: Imran Siddique Date: Fri, 25 Sep 2026 20:10:37 -0700 Subject: [PATCH] ci: drop the unused statuses scope from the maintainer approval gate Co-Authored-By: Claude Opus 5.5 --- .github/workflows/require-maintainer-approval.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/require-maintainer-approval.yml b/.github/workflows/require-maintainer-approval.yml index ad235cd..0a7e292 100644 --- a/.github/workflows/require-maintainer-approval.yml +++ b/.github/workflows/require-maintainer-approval.yml @@ -13,12 +13,15 @@ on: permissions: contents: read - pull-requests: read - statuses: write jobs: gate: runs-on: ubuntu-latest + # Reads the PR and its reviews, then fails the job if no maintainer + # approved the head commit. It writes nothing, so no write scope. + permissions: + contents: read + pull-requests: read if: github.event.pull_request.base.ref == 'main' steps: - name: Check for maintainer approval