From fcfc9b22d02e0f73630f34a040ae5394739fe6cf Mon Sep 17 00:00:00 2001
From: Francisco Solla <fsolla@pm.me>
Date: Wed, 19 Aug 2026 18:18:04 -0300
Subject: [PATCH] =?UTF-8?q?fix(OPS71):=20GITHUB=5FTOKEN=20expl=C3=ADcito?=
 =?UTF-8?q?=20no=20safety=20net=20via=20github.token?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/agent-pr-ready-automerge.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/agent-pr-ready-automerge.yml b/.github/workflows/agent-pr-ready-automerge.yml
index ece4c3b2..001c7677 100644
--- a/.github/workflows/agent-pr-ready-automerge.yml
+++ b/.github/workflows/agent-pr-ready-automerge.yml
@@ -49,4 +49,9 @@ jobs:
           node-version: 24
           package-manager-cache: false
       - name: Mark Ready and arm auto-merge
+        env:
+          # Explicit `github.token` — the built-in GITHUB_TOKEN env is not
+          # guaranteed to be injected on every event path; passing it via the
+          # documented context is the robust form.
+          GITHUB_TOKEN: ${{ github.token }}
         run: node scripts/github-pr-automerge.mjs --pr "${{ github.event.pull_request.number }}"