From 8bba3be91fd790b7bbf75eac1eb40671c98935dd Mon Sep 17 00:00:00 2001 From: Jake Fineman Date: Tue, 1 Sep 2026 09:43:01 -0400 Subject: [PATCH 1/2] fix(ci): repoint io-triage to wave-foundation-public mirror The public->private uses: reference produces a startup_failure with no jobs, no logs, and no visible check - it is invisible on issue events. Repoint all three pointers (uses/scripts_repo/scripts_ref) to the published mirror at the pinned SHA. --- .github/workflows/issue-ops-triage.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/issue-ops-triage.yml b/.github/workflows/issue-ops-triage.yml index ba265cd..9cf80d6 100644 --- a/.github/workflows/issue-ops-triage.yml +++ b/.github/workflows/issue-ops-triage.yml @@ -11,13 +11,13 @@ concurrency: jobs: triage: if: vars.IO_ENABLED == 'true' - uses: wave-av/wave-foundation/.github/workflows/io-triage.yml@5d0b9e1a35efdb6d4e2ba55c483af670b69a8470 + uses: wave-av/wave-foundation-public/.github/workflows/io-triage.yml@f63b91566ab311b09599db6195da8c353cab1f69 permissions: contents: read issues: write with: - scripts_repo: wave-av/wave-foundation - scripts_ref: "5d0b9e1a35efdb6d4e2ba55c483af670b69a8470" + scripts_repo: wave-av/wave-foundation-public + scripts_ref: "f63b91566ab311b09599db6195da8c353cab1f69" owner: ${{ vars.IO_OWNER }} secrets: gh_pat: ${{ secrets.ISSUE_OPS_PAT }} From d07361daca4c36c182a9ffd08e0be119646d81a9 Mon Sep 17 00:00:00 2001 From: Jake Fineman Date: Tue, 1 Sep 2026 10:59:16 -0400 Subject: [PATCH 2/2] docs(ci): explain why the triage job needs issues: write Applies the reviewer's suggestion: an unexplained write scope reads as over-permission in a later review. One comment keeps it intentional. Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/issue-ops-triage.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/issue-ops-triage.yml b/.github/workflows/issue-ops-triage.yml index 9cf80d6..ef760d7 100644 --- a/.github/workflows/issue-ops-triage.yml +++ b/.github/workflows/issue-ops-triage.yml @@ -4,6 +4,7 @@ on: types: [opened, edited] permissions: contents: read + # Required to apply triage labels and comments. issues: write concurrency: group: issue-ops-triage-${{ github.event.issue.number }}