The review-bot sweep lists the PRs that request review-bot through /repos/issues/search, which needs read:issue. The rotate-mint step of review-bot-secret-rotate mints REVIEW_TOKEN with write:repository only, so every sweep gets HTTP 403.
This adds read:issue to that step's GITEA_SCOPES. The MCP token step is unchanged.
Tested: kubectl kustomize kubernetes/infrastructure/openbao renders the CronJob with write:repository,read:issue.
Closes #1505
The review-bot sweep lists the PRs that request review-bot through `/repos/issues/search`, which needs `read:issue`. The `rotate-mint` step of `review-bot-secret-rotate` mints `REVIEW_TOKEN` with `write:repository` only, so every sweep gets HTTP 403.
This adds `read:issue` to that step's `GITEA_SCOPES`. The MCP token step is unchanged.
Tested: `kubectl kustomize kubernetes/infrastructure/openbao` renders the CronJob with `write:repository,read:issue`.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Closes #1505
The review-bot sweep lists the PRs that request review-bot through
/repos/issues/search, which needsread:issue. Therotate-mintstep ofreview-bot-secret-rotatemintsREVIEW_TOKENwithwrite:repositoryonly, so every sweep gets HTTP 403.This adds
read:issueto that step'sGITEA_SCOPES. The MCP token step is unchanged.Tested:
kubectl kustomize kubernetes/infrastructure/openbaorenders the CronJob withwrite:repository,read:issue.🤖 Generated with Claude Code