From 2150a3d4b7b058ae8783a8ae6a8a9ab2f272eade Mon Sep 17 00:00:00 2001
From: Kegan Maher <kegan@compiler.la>
Date: Tue, 17 Dec 2024 18:35:24 +0000
Subject: [PATCH] fix(ci): permissions for labeler jobs

---
 .github/workflows/dependency-triage.yml | 2 ++
 .github/workflows/labeler-actions.yml   | 2 ++
 .github/workflows/labeler-docs.yml      | 2 ++
 3 files changed, 6 insertions(+)

diff --git a/.github/workflows/dependency-triage.yml b/.github/workflows/dependency-triage.yml
index 0af7dc9..24b4502 100644
--- a/.github/workflows/dependency-triage.yml
+++ b/.github/workflows/dependency-triage.yml
@@ -7,6 +7,8 @@ on:
 jobs:
   dependency-triage:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     # see https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#responding-to-events
     if: github.actor == 'dependabot[bot]' || github.actor == 'pre-commit-ci[bot]'
     steps:
diff --git a/.github/workflows/labeler-actions.yml b/.github/workflows/labeler-actions.yml
index ecc5cd7..d8dbbbe 100644
--- a/.github/workflows/labeler-actions.yml
+++ b/.github/workflows/labeler-actions.yml
@@ -10,6 +10,8 @@ on:
 jobs:
   label-actions:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - name: add-label
         uses: andymckay/labeler@master
diff --git a/.github/workflows/labeler-docs.yml b/.github/workflows/labeler-docs.yml
index 8790501..a8afc11 100644
--- a/.github/workflows/labeler-docs.yml
+++ b/.github/workflows/labeler-docs.yml
@@ -12,6 +12,8 @@ on:
 jobs:
   label-docs:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - name: add-label
         uses: andymckay/labeler@master