The rpm-changelog action's repo-url input uses mktemp which fails on runners with restricted /tmp permissions. Clone the upstream repo directly in the workflow and use source-dir instead. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>