From a3229aca55566420ca35eedb5676e2602a0d2da7 Mon Sep 17 00:00:00 2001
From: Paul Lorenz <paul.lorenz@netfoundry.io>
Date: Thu, 24 Sep 2026 14:52:53 -0400
Subject: [PATCH 1/2] Fix triage workflow permissions

---
 .github/workflows/check-needs-reviews.yml | 19 ++++++++++++++-----
 1 file changed, 14 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/check-needs-reviews.yml b/.github/workflows/check-needs-reviews.yml
index 2b10cb664..c9100a20b 100644
--- a/.github/workflows/check-needs-reviews.yml
+++ b/.github/workflows/check-needs-reviews.yml
@@ -11,12 +11,21 @@ permissions: {}
 jobs:
   add-to-project:
     runs-on: ubuntu-latest
+    if: >-
+      github.actor != 'dependabot[bot]' &&
+      !contains(fromJson('["andrewpmartinez", "dovholuknf","ekoby","michaelquigley", "mikegorman-nf", "plorenz", "emoscardini","scarey","smilindave26"]'), github.actor)
     steps:
-      - name: Check author and add to project
-        if: >-
-          github.actor != 'dependabot[bot]' &&
-          !contains(fromJson('["andrewpmartinez", "dovholuknf","ekoby","michaelquigley", "mikegorman-nf", "plorenz", "emoscardini","scarey","smilindave26"]'), github.actor)
+      - name: Mint project token
+        id: app-token
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
+        with:
+          client-id: ${{ vars.TRIAGE_APP_CLIENT_ID }}
+          private-key: ${{ secrets.TRIAGE_APP_PRIVATE_KEY }}
+          owner: openziti
+          permission-organization-projects: write
+
+      - name: Add to project
         uses: actions/add-to-project@5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd  # v2.0.0
         with:
           project-url: https://github.com/orgs/openziti/projects/38
-          github-token: ${{ secrets.GH_CI_KEY }}
+          github-token: ${{ steps.app-token.outputs.token }}

From 6348984dd22635cd52a881ab7c1106b1fa335b5f Mon Sep 17 00:00:00 2001
From: Paul Lorenz <paul.lorenz@netfoundry.io>
Date: Thu, 24 Sep 2026 15:05:49 -0400
Subject: [PATCH 2/2] Update triage skip list

- adds CLBRITTON2 to the skip list
- corrects scarey to scareything, the actual GitHub login
---
 .github/workflows/check-needs-reviews.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/check-needs-reviews.yml b/.github/workflows/check-needs-reviews.yml
index c9100a20b..aee90b270 100644
--- a/.github/workflows/check-needs-reviews.yml
+++ b/.github/workflows/check-needs-reviews.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     if: >-
       github.actor != 'dependabot[bot]' &&
-      !contains(fromJson('["andrewpmartinez", "dovholuknf","ekoby","michaelquigley", "mikegorman-nf", "plorenz", "emoscardini","scarey","smilindave26"]'), github.actor)
+      !contains(fromJson('["andrewpmartinez", "CLBRITTON2", "dovholuknf", "ekoby", "emoscardini", "michaelquigley", "mikegorman-nf", "plorenz", "scareything", "smilindave26"]'), github.actor)
     steps:
       - name: Mint project token
         id: app-token