Croway opened a new issue, #133:
URL: https://github.com/apache/camel-upgrade-recipes/issues/133

   `.github/workflows/comment-pr.yml` (triggered via `workflow_run` when 
`receive-pr` completes,
   to post the OpenRewrite patch as a PR comment) has failed with 
`startup_failure` on every
   single run since at least 2026-08-25, with zero jobs ever created:
   
   ```
   $ gh run list --workflow=comment-pr.yml --limit 10
   completed  startup_failure  comment-pr  main  workflow_run  34974276122  0s  
2026-09-15T13:19:36Z
   completed  startup_failure  comment-pr  main  workflow_run  34973597155  0s  
2026-09-15T13:13:11Z
   completed  startup_failure  comment-pr  main  workflow_run  34967476361  0s  
2026-09-15T12:11:59Z
   completed  startup_failure  comment-pr  main  workflow_run  34964978102  0s  
2026-09-15T11:45:08Z
   completed  startup_failure  comment-pr  main  workflow_run  34598633934  0s  
2026-09-11T12:23:04Z
   completed  startup_failure  comment-pr  main  workflow_run  32848753617  0s  
2026-08-25T12:38:58Z
   completed  startup_failure  comment-pr  main  workflow_run  32844934883  0s  
2026-08-25T11:56:51Z
   completed  startup_failure  comment-pr  main  workflow_run  32841737321  0s  
2026-08-25T11:19:42Z
   completed  startup_failure  comment-pr  main  workflow_run  32839424480  0s  
2026-08-25T10:52:44Z
   completed  startup_failure  comment-pr  main  workflow_run  32836579991  0s  
2026-08-25T10:18:51Z
   ```
   
   `gh api repos/apache/camel-upgrade-recipes/actions/runs/34974276122/jobs` 
returns
   `{"total_count":0,"jobs":[]}` -- the run fails before any job is even 
scheduled, which is the
   usual signature of a workflow being rejected because it requests more 
`GITHUB_TOKEN`
   permission than the repository's default workflow permissions allow.
   
   The `post-suggestions` job in `comment-pr.yml` declares:
   
   ```yaml
   permissions:
     pull-requests: write
   ```
   
   If the repo/org's default `GITHUB_TOKEN` permissions are read-only (common 
under ASF INFRA
   policy) and this workflow isn't allow-listed for the elevated scope, every 
run would fail
   exactly like this. That's a hypothesis based on the symptom, not a confirmed 
root cause --
   someone with access to the repository's Settings → Actions → General → 
"Workflow permissions"
   page would need to check.
   
   Net effect: PR review-comment automation (the OpenRewrite-suggested-diff 
comment) has not
   actually been posting to any PR for at least three weeks.
   
   _Claude Code on behalf of croway_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to