fix(review-bot): mint the review token with read:issue #1507

Merged
k.renner merged 1 commits from review-bot-token-read-issue into main 2026-10-28 00:27:23 +00:00
Member

Closes #1505

The review-bot sweep lists the PRs that request review-bot through /repos/issues/search, which needs read:issue. The rotate-mint step of review-bot-secret-rotate mints REVIEW_TOKEN with write:repository only, so every sweep gets HTTP 403.

This adds read:issue to that step's GITEA_SCOPES. The MCP token step is unchanged.

Tested: kubectl kustomize kubernetes/infrastructure/openbao renders the CronJob with write:repository,read:issue.

🤖 Generated with Claude Code

Closes #1505 The review-bot sweep lists the PRs that request review-bot through `/repos/issues/search`, which needs `read:issue`. The `rotate-mint` step of `review-bot-secret-rotate` mints `REVIEW_TOKEN` with `write:repository` only, so every sweep gets HTTP 403. This adds `read:issue` to that step's `GITEA_SCOPES`. The MCP token step is unchanged. Tested: `kubectl kustomize kubernetes/infrastructure/openbao` renders the CronJob with `write:repository,read:issue`. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
claude-bot added 1 commit 2026-10-28 00:26:17 +00:00
fix(review-bot): mint the review token with read:issue
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
6e5e369f60
The sweep lists PRs that request review-bot via /repos/issues/search,
which needs read:issue.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
k.renner merged commit 2eb943cbf4 into main 2026-10-28 00:27:23 +00:00
Sign in to join this conversation.