From d6fdfec0e559cdfd8f56b02c9e7718db758bf0d2 Mon Sep 17 00:00:00 2001 From: Jeremy Stretch Date: Tue, 28 Apr 2026 07:51:18 -0400 Subject: [PATCH] Remove id-token: write; add github_token --- .github/workflows/claude-issue-triage.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/claude-issue-triage.yml b/.github/workflows/claude-issue-triage.yml index 42bef5595..7370fa274 100644 --- a/.github/workflows/claude-issue-triage.yml +++ b/.github/workflows/claude-issue-triage.yml @@ -11,7 +11,6 @@ jobs: permissions: contents: read issues: write - id-token: write steps: - name: Checkout repository @@ -24,6 +23,7 @@ jobs: uses: anthropics/claude-code-action@e763fe78de2db7389e04818a00b5ff8ba13d1360 # v1 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} + github_token: ${{ secrets.GITHUB_TOKEN }} # Restrict Claude to read-only inspection of the repo plus posting a single comment # on THIS issue only. `gh issue comment` is pinned to the current issue number, so an # injection cannot redirect a comment to another issue. Close, label, reopen, assign,