include-source: false # Drop file/line/col from output skip: - Go --- on: push permissions: actions: read jobs: deploy: uses: contoso/templates/.github/workflows/deploy.yml@v1 --- contoso/templates/.github/workflows/deploy.yml@v1 --- on: workflow_call permissions: actions: write jobs: deploy: runs-on: ubuntu-latest steps: - run: echo hi --- { "errors": [ { "Message": ".github/workflows/errors-reusable-workflow-permissions-not-allowed-workflow-level-from-caller-workflow-level.yml (Line: 5, Col: 3): Error calling workflow 'contoso/templates/.github/workflows/deploy.yml@v1'. The workflow 'contoso/templates/.github/workflows/deploy.yml@v1' is requesting 'actions: write', but is only allowed 'actions: read'." } ] }