fix(ci): permissions for labeler jobs

compilerla · Dec 17, 2024 · 2150a3d · 2150a3d
1 parent 3441c31
commit 2150a3d
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/dependency-triage.yml b/.github/workflows/dependency-triage.yml
@@ -7,6 +7,8 @@ on:
 jobs:
   dependency-triage:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     # see https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#responding-to-events
     if: github.actor == 'dependabot[bot]' || github.actor == 'pre-commit-ci[bot]'
     steps:

diff --git a/.github/workflows/labeler-actions.yml b/.github/workflows/labeler-actions.yml
@@ -10,6 +10,8 @@ on:
 jobs:
   label-actions:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - name: add-label
         uses: andymckay/labeler@master

diff --git a/.github/workflows/labeler-docs.yml b/.github/workflows/labeler-docs.yml
@@ -12,6 +12,8 @@ on:
 jobs:
   label-docs:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - name: add-label
         uses: andymckay/labeler@master