From e804a831a4d3b57dc3f79b25a5d00fa81343be39 Mon Sep 17 00:00:00 2001 From: Dustin Byrne Date: Wed, 19 Aug 2026 18:07:15 -0400 Subject: [PATCH 1/2] chore: update flags project workflow SHA --- .github/workflows/call-flags-project-board.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/call-flags-project-board.yml b/.github/workflows/call-flags-project-board.yml index 66e6927..f7c842a 100644 --- a/.github/workflows/call-flags-project-board.yml +++ b/.github/workflows/call-flags-project-board.yml @@ -9,9 +9,11 @@ on: jobs: call-flags-project: - uses: PostHog/.github/.github/workflows/flags-project-board.yml@c220af5fc29f2818f91ac8e4906ca71a3da880ff + uses: PostHog/.github/.github/workflows/flags-project-board.yml@95c20087fda2dc10fbbbcc3f1ef32b7bae779339 with: pr_number: ${{ github.event.pull_request.number }} pr_node_id: ${{ github.event.pull_request.node_id }} is_draft: ${{ github.event.pull_request.draft }} - secrets: inherit # nosemgrep: yaml.github-actions.security.secrets-inherit.secrets-inherit -- reusable workflow requires inherited secrets \ No newline at end of file + secrets: + PROJECT_BOARD_BOT_APP_ID: ${{ secrets.PROJECT_BOARD_BOT_APP_ID }} + PROJECT_BOARD_BOT_PRIVATE_KEY: ${{ secrets.PROJECT_BOARD_BOT_PRIVATE_KEY }} \ No newline at end of file From e449d61b6e7db9adbc5175d0ee4501bc5c71665a Mon Sep 17 00:00:00 2001 From: Dustin Byrne Date: Wed, 19 Aug 2026 18:24:13 -0400 Subject: [PATCH 2/2] chore: set project workflow permissions --- .github/workflows/call-flags-project-board.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/call-flags-project-board.yml b/.github/workflows/call-flags-project-board.yml index f7c842a..76c9270 100644 --- a/.github/workflows/call-flags-project-board.yml +++ b/.github/workflows/call-flags-project-board.yml @@ -7,6 +7,8 @@ on: pull_request: types: [opened, ready_for_review, review_requested, synchronize, converted_to_draft, reopened] +permissions: {} + jobs: call-flags-project: uses: PostHog/.github/.github/workflows/flags-project-board.yml@95c20087fda2dc10fbbbcc3f1ef32b7bae779339