mirror of https://github.com/garrytan/gstack.git
GITHUB_TOKEN is scoped read-only on fork PRs by GitHub security policy, even when the workflow declares pull-requests/issues: write. This causes the 'Post PR comment' step to fail with: GraphQL: Resource not accessible by integration (addComment) Fix: gate the entire report job with: github.event.pull_request.head.repo.full_name == github.repository Fork contributors still see all eval results in job logs + uploaded artifacts. The comment only appears for maintainer PRs from the same repo where GITHUB_TOKEN has the necessary write scope. Ref: GitHub docs — 'Permissions for the GITHUB_TOKEN | Fork PRs' |
||
|---|---|---|
| .. | ||
| actionlint.yml | ||
| ci-image.yml | ||
| evals-periodic.yml | ||
| evals.yml | ||
| make-pdf-gate.yml | ||
| pr-title-sync.yml | ||
| skill-docs.yml | ||
| version-gate.yml | ||
| windows-free-tests.yml | ||
| windows-setup-e2e.yml | ||