From 62ceab8ff14117a2c39bc6d6e5971b0fb3010ad1 Mon Sep 17 00:00:00 2001 From: Kevin Backhouse Date: Tue, 21 Oct 2025 19:17:01 +0100 Subject: [PATCH 1/3] Add more permissions --- .github/workflows/smoketest.yaml | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/.github/workflows/smoketest.yaml b/.github/workflows/smoketest.yaml index f82fb11..98b544f 100644 --- a/.github/workflows/smoketest.yaml +++ b/.github/workflows/smoketest.yaml @@ -4,9 +4,14 @@ on: issue_comment: types: [created] # Add "smoke test" as a PR comment to trigger this workflow. +# Permissions needed for reacting and adding comments for IssueOps commands +# See: https://github.com/github/branch-deploy/blob/48285b12b35e47e2dde0c27d2abb33daa846d98b/README.md?plain=1#L189-L197 permissions: - contents: read - pull-requests: write # For adding a reaction to the comment + pull-requests: write # Required for commenting on PRs + deployments: write # Required for updating deployment statuses + contents: write # Required for reading/writing the lock file + checks: read # Required for checking if the CI checks have passed in order to deploy the PR + statuses: read # Required for checking if all commit statuses are "success" in order to deploy the PR jobs: Linux: From 6658c66ebfd9b2b5d763232389e5a361e8bb1642 Mon Sep 17 00:00:00 2001 From: Kevin Backhouse Date: Wed, 22 Oct 2025 16:06:01 +0100 Subject: [PATCH 2/3] Checkout pull request branch --- .github/workflows/smoketest.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/smoketest.yaml b/.github/workflows/smoketest.yaml index 98b544f..3cf7d88 100644 --- a/.github/workflows/smoketest.yaml +++ b/.github/workflows/smoketest.yaml @@ -31,7 +31,9 @@ jobs: python-version: '3.11' - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@v5 + with: + ref: ${{ github.head_ref }} - name: Setup Python venv run: | From 22e6d551b002f6abb04637b95d83fe17bb37dab3 Mon Sep 17 00:00:00 2001 From: Kevin Backhouse Date: Thu, 23 Oct 2025 14:53:51 +0100 Subject: [PATCH 3/3] Allow workflow to run on branches that are behind main. --- .github/workflows/smoketest.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/smoketest.yaml b/.github/workflows/smoketest.yaml index 3cf7d88..a13a714 100644 --- a/.github/workflows/smoketest.yaml +++ b/.github/workflows/smoketest.yaml @@ -24,6 +24,7 @@ jobs: trigger: "smoke test" reaction: "eyes" stable_branch: "main" + update_branch: "disable" - name: Setup Python uses: actions/setup-python@v5