Skip to content

Grant Renovate status and vulnerability-alert access - #94

Merged
rb3ckers merged 3 commits into
mainfrom
fix-renovate-status-permission
Oct 16, 2026
Merged

rb3ckers merged 3 commits into
mainfrom
fix-renovate-status-permission

Conversation

@rb3ckers

@rb3ckers rb3ckers commented Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Allow Renovate to write commit statuses for release-age checks and read Dependabot vulnerability alerts. Keep explicit, repository-scoped token permissions.

The App’s StackVista installation must grant Dependabot alerts read access.

Validation: Actionlint, offline Zizmor and golangci-lint pass. No new Zizmor exceptions.

Tracking: https://github.com/StackVista/stackstate/issues/865

@rb3ckers rb3ckers changed the title Allow Renovate to write commit statuses Inherit Renovate App permissions Oct 16, 2026
@rb3ckers rb3ckers changed the title Inherit Renovate App permissions Grant Renovate status and vulnerability-alert access Oct 16, 2026
@rb3ckers
rb3ckers merged commit 5d79904 into main Oct 16, 2026
6 checks passed
@rb3ckers
rb3ckers deleted the fix-renovate-status-permission branch October 16, 2026 12:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants