refusing to allow a GitHub App to create or update workflow without workflows permission

[Xuanwo]

Hi, we met the following problems every time we have updated our workflow.

Like in PR datafuselabs/databend#9147

refusing to allow a GitHub App to create or update workflow .github/workflows/databend-release.yml without workflows permission
err-code: 704E2

But we are sure that we have given workflows permission to mergify.

Our workflows are listed here: https://github.com/datafuselabs/databend/tree/main/.github/workflows

[jd]

You need to update the permission granted to Mergify. An admin should log into their Mergify dashboard and ensure permissions are up to date.

[Xuanwo]

I'm not sure what's the permissions mentioned here. But it looks good from github side:

[jd]

This does not show permissions. Did you check from your Mergify dashboard if you had new permission to accept?

[Xuanwo]

No notification from the dashboard.

[Xuanwo]

databend.release.yml has permission settings like:

permissions:
  id-token: write
  contents: write

Does this matters?

[jd]

Not at all.

[AlekSi]

refusing to allow a GitHub App to create or update workflow .github/workflows/website-preview.yml without workflows permission
err-code: 8D91D

• https://github.com/FerretDB/FerretDB/pull/2422/checks?check_run_id=12834081044

Mergify has access to:

Read and write access to checks, code, issues, pages, pull requests, and workflows

No prompt in the dashboard.