From 109e886d1bd6c1e0bcd709b6ff2fcac45b85ff89 Mon Sep 17 00:00:00 2001
From: Jeremy Daer <jeremydaer@gmail.com>
Date: Mon, 27 Jul 2026 16:02:17 -0700
Subject: [PATCH] ci: seed skills token needs issues write for failure
 notifications
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Review feedback (Codex, cli#53): scoping the skills App token to
contents alone silently broke the failure-notification path — the same
token drives gh issue list/comment/create on the skills repo, and those
calls are swallowed by || true. permission-issues: write restores them.
---
 seed/.github/workflows/release.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/seed/.github/workflows/release.yml b/seed/.github/workflows/release.yml
index ed95970..5013de0 100644
--- a/seed/.github/workflows/release.yml
+++ b/seed/.github/workflows/release.yml
@@ -378,6 +378,7 @@ jobs:
           private-key: ${{ secrets.SKILLS_APP_PRIVATE_KEY }}
           owner: basecamp
           permission-contents: write
+          permission-issues: write # failure notifications: gh issue list/comment/create on the skills repo
           repositories: skills
 
       - name: Sync skills to distribution repo