Skip to content

[cli-tools-test] example-permissions-warning.md fails compilation despite strict: false #18582

Description

@github-actions

Discovered during exploratory testing of the compile tool (workflow run #22466261312).

Problem Description

The workflow .github/workflows/example-permissions-warning.md fails to compile with a hard error, even though the file has strict: false and features.dangerous-permissions-write: true in its frontmatter. The workflow's own body text claims "this workflow compiles without warnings", indicating this is a regression.

Steps to Reproduce

Use the compile MCP tool on the workflow:

agenticworkflows-compile workflows: ["example-permissions-warning.md"]
```

## Expected Behavior

The workflow should compile successfully (it has `strict: false` and `features.dangerous-permissions-write: true`), matching the description in the file body: *"All required permissions are properly declared in the frontmatter, so this workflow compiles without warnings."*

## Actual Behavior

Compilation fails with:
```
error: Missing required permissions for GitHub toolsets:
  - contents: write (required by repos)
  - issues: write (required by issues)
  - pull-requests: write (required by pull_requests)

Frontmatter Context

The failing workflow has:

permissions:
  contents: read
  issues: read
  pull-requests: read
tools:
  github:
    toolsets: [repos, issues, pull_requests]
    read-only: false
strict: false
features:
  dangerous-permissions-write: true

Environment

  • Repository: github/gh-aw
  • Run ID: 22466261312
  • Date: 2026-02-26
  • File: .github/workflows/example-permissions-warning.md

Impact

  • Severity: Medium
  • Frequency: Always (reproducible)
  • Workaround: None; the example is broken

This is likely a regression introduced when the permissions check was made stricter or when strict: false stopped suppressing the permissions validation error. It also affects make recompile CI runs since it reports 2 compilation failures.

Generated by Daily CLI Tools Exploratory Tester

  • expires on Mar 6, 2026, 12:00 AM UTC

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions