include-source: false # Drop file/line/col from output skip: - Go permissions-policy: LimitedRead # Note, the workflow names are intentionally short so the error message doesn't get truncated too much --- on: push jobs: deploy: permissions: {} uses: a/b/.github/workflows/c.yml@v1 --- a/b/.github/workflows/c.yml@v1 --- on: workflow_call jobs: deploy: name: Deploy 1 permissions: read-all runs-on: ubuntu-latest steps: - run: echo hi --- { "errors": [ { "Message": ".github/workflows/errors-reusable-workflow-permissions-not-allowed-request-read-all-allowed-none.yml (Line: 3, Col: 3): Error calling workflow 'a/b/.github/workflows/c.yml@v1'. The nested job 'Deploy 1' is requesting 'actions: read, checks: read, contents: read, deployments: read, discussions: read, issues: read, packages: read, pages: read, pull-requests: read, repository-projects: read, statuses: read, security-events: read, id-token: read', but is only allowed 'actions: none, checks: none, co[...]" } ] }