From 915fd5deb5d2c0cf32c9c2a3f332419f8c43c28d Mon Sep 17 00:00:00 2001 From: Lasse Benninga Date: Mon, 6 Jul 2026 17:18:43 +0200 Subject: [PATCH] fix(ci): grant contents:read so the grade workflow stops failing at startup MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The grade job listed only issues:write + pull-requests:write. A permissions block forces every unlisted scope to `none`, so this granted contents:none. Since 2026-05-03 the reusable HackYourFuture/github-actions auto-grade.yml requests contents:read (actions/checkout), and GitHub rejects a reusable workflow whose job needs more permission than the caller grants — at load time, which is why every run shows startup_failure with 0 jobs. Adding contents:read matches the working c55-data-week-6 caller. Note: this PR's own run still uses the base-branch (broken) workflow because pull_request_target evaluates the workflow from the base ref, so the check here will still startup_failure until this merges to main. New/updated PRs after merge will grade correctly. Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/grade-assignment.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/grade-assignment.yml b/.github/workflows/grade-assignment.yml index d06dc2d..3fd4b9c 100644 --- a/.github/workflows/grade-assignment.yml +++ b/.github/workflows/grade-assignment.yml @@ -8,6 +8,7 @@ on: jobs: grade: permissions: + contents: read issues: write pull-requests: write uses: HackYourFuture/github-actions/.github/workflows/auto-grade.yml@main