This is an automated email from the ASF dual-hosted git repository.
raulcd pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow.git
The following commit(s) were added to refs/heads/main by this push:
new fe5e0e5eec GH-48780: [CI] Add missing permissions for reusable
workflow calls (#48778)
fe5e0e5eec is described below
commit fe5e0e5eec6ff644879e4371d83ce130e475b8f1
Author: Hyukjin Kwon <[email protected]>
AuthorDate: Thu Jan 8 18:48:25 2026 +0900
GH-48780: [CI] Add missing permissions for reusable workflow calls (#48778)
### Rationale for this change
Workflows `cpp_extra.yml`, `r_extra.yml` and `package_linux.yml` call
reusable workflows (`check_labels.yml` and `report_ci.yml`) that require
specific permissions. When #48771 added explicit permissions to these reusable
workflows, the calling workflows were not updated to give those permissions.
This caused `startup_failure` errors when these workflows were triggered on
pull requests. Here are example failures:
https://github.com/apache/arrow/actions/runs/20809257825 and
https://github.com/apache/arrow/actions/runs/20803198596
### What changes are included in this PR?
Added missing permissions to the workflows
### Are these changes tested?
Yes, I tested them within this PR.
### Are there any user-facing changes?
No, dev-only.
* GitHub Issue: #48780
Authored-by: Hyukjin Kwon <[email protected]>
Signed-off-by: Raúl Cumplido <[email protected]>
---
.github/workflows/cpp_extra.yml | 2 ++
.github/workflows/package_linux.yml | 2 ++
.github/workflows/r_extra.yml | 2 ++
3 files changed, 6 insertions(+)
diff --git a/.github/workflows/cpp_extra.yml b/.github/workflows/cpp_extra.yml
index 5ad06b2e01..7ab4c73270 100644
--- a/.github/workflows/cpp_extra.yml
+++ b/.github/workflows/cpp_extra.yml
@@ -77,7 +77,9 @@ concurrency:
cancel-in-progress: true
permissions:
+ actions: read
contents: read
+ pull-requests: read
jobs:
check-labels:
diff --git a/.github/workflows/package_linux.yml
b/.github/workflows/package_linux.yml
index 20950e2888..3e4b759215 100644
--- a/.github/workflows/package_linux.yml
+++ b/.github/workflows/package_linux.yml
@@ -61,8 +61,10 @@ concurrency:
cancel-in-progress: true
permissions:
+ actions: read
# Upload to GitHub Release
contents: write
+ pull-requests: read
jobs:
check-labels:
diff --git a/.github/workflows/r_extra.yml b/.github/workflows/r_extra.yml
index 8c4ec668f4..687a4e0aa0 100644
--- a/.github/workflows/r_extra.yml
+++ b/.github/workflows/r_extra.yml
@@ -67,7 +67,9 @@ concurrency:
cancel-in-progress: true
permissions:
+ actions: read
contents: read
+ pull-requests: read
jobs:
check-labels:
