Would you block a PR that changes GitHub Actions contents permission from read to write?

A sandbox PR changed one GitHub Actions workflow permission: permissions: contents: write The base branch had: permissions: contents: read That is the concrete case I am trying to calibrate. Agent Gate reported: Agent Gate: NEEDS HUMAN DECISION Decision: warn Why: contents permission increased from

Related Stories

📰

The Workflow is the Product: Why Enterprise AI Must Move Beyond Copilots

Hardcoding LLM prompts is fine until it isn't. Here's what we built instead.

📰

COSS Weekly: Timefold raises $13M, Continue.dev acquired by Cursor, Modular acquired by Qualcomm, and more

📰

I built a ATS resume scanner as an M.Sc. student — here's why I did it