diff --git a/.github/workflows/marvin-comment-on-issue.yml b/.github/workflows/marvin-comment-on-issue.yml index 1ecc91806..8d297a226 100644 --- a/.github/workflows/marvin-comment-on-issue.yml +++ b/.github/workflows/marvin-comment-on-issue.yml @@ -8,9 +8,10 @@ on: types: [created] permissions: + actions: read contents: write issues: write - pull-requests: read + pull-requests: write id-token: write jobs: @@ -20,7 +21,7 @@ jobs: contains(github.event.comment.body, '/marvin') && contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association) runs-on: ubuntu-latest - timeout-minutes: 15 + timeout-minutes: 60 steps: - name: Checkout repository @@ -79,12 +80,9 @@ jobs: - This workflow allows read, write, and execute capabilities but cannot push changes. - You CAN: Read/analyze code, modify files, write code, run tests, execute commands - You CANNOT: Commit code, push changes, create branches, checkout branches, create pull requests + You CAN: Commit code, push changes, create branches, create pull requests - **Important**: You cannot push changes to the repository - you can only make changes locally and provide feedback or recommendations.