From cb5daf58ce52de956047bf382c3d83657b65900d Mon Sep 17 00:00:00 2001 From: Zonghao Yuan <64521992+zonghaoyuan@users.noreply.github.com> Date: Sat, 27 Jun 2026 20:04:10 +0800 Subject: [PATCH] fix(ci): grant CLA bot pull-request write permission (#115) The CLA Assistant workflow had `pull-requests: read`, which prevented the GITHUB_TOKEN from posting the sign-CLA comment on PRs. Change to `pull-requests: write` so the bot can comment. Also removed the `protect-cla-signatures` ruleset (GitHub-side) that marked the signatures branch as protected, blocking the bot from pushing signature records. Co-authored-by: Claude Opus 4.6 --- .github/workflows/cla.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml index 8f839bb..9ea5867 100644 --- a/.github/workflows/cla.yml +++ b/.github/workflows/cla.yml @@ -21,7 +21,7 @@ on: # branch-protection required check (cla/cla-assistant.yml) reports against. permissions: contents: read - pull-requests: read + pull-requests: write issues: write statuses: write