Add issues:write permission to create-discussion jobs for fallback support

[Copilot]

The create-discussion safe output includes a fallback-to-issue feature (enabled by default) that creates an issue when discussion creation fails due to permissions. The job lacked issues: write permission, causing fallback failures.

Changes

• New permission factory: NewPermissionsContentsReadIssuesWriteDiscussionsWrite() grants contents: read, issues: write, and discussions: write
• Updated create_discussion job: Uses new permission function instead of NewPermissionsContentsReadDiscussionsWrite()
• Updated aggregated safe_outputs job: Merges correct permissions when CreateDiscussions is configured

Result

All create-discussion jobs now have required permissions for both primary (discussion creation) and fallback (issue creation) paths:

safe_outputs:
  permissions:
    contents: read
    discussions: write
    issues: write  # Added for fallback-to-issue support

Original prompt

Reference: https://github.com/github/gh-aw/actions/runs/21689598271/job/62546849702#step:6:1

the fallback issue creation route for the create-discussion safe output requires the issue: write permission in the safe output job.

Also make sure that the discussions: write permission is set.

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[Copilot]

Pull request overview

This PR adds the issues: write permission to create-discussion jobs to support the fallback-to-issue feature. When discussion creation fails due to permissions (e.g., discussions not enabled), the job falls back to creating an issue instead. This fallback feature is enabled by default but requires the issues: write permission to function properly.

Changes:

• Added new permission factory function NewPermissionsContentsReadIssuesWriteDiscussionsWrite() that grants contents: read, issues: write, and discussions: write permissions
• Updated create-discussion job generation to use the new permission function
• Updated consolidated safe_outputs job to merge correct permissions when CreateDiscussions is configured

Reviewed changes

Copilot reviewed 50 out of 50 changed files in this pull request and generated no comments.

File	Description
pkg/workflow/permissions_factory.go	Added new permission factory function for create-discussion jobs with fallback-to-issue support
pkg/workflow/create_discussion.go	Updated to use new permission function that includes issues: write
pkg/workflow/compiler_safe_outputs_job.go	Updated consolidated safe outputs job to use new permission function for CreateDiscussions
.github/workflows/*.lock.yml (54 files)	Regenerated workflow lock files with updated permissions (added issues: write)

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.