github-actions: pull_request in forked PRs cannot change permissions …

…scope (elastic#196550) (cherry picked from commit 4b09db3)
kibanamachine · Oct 17, 2024 · 607055b · 607055b
1 parent a0b7048
commit 607055b
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/.github/workflows/oblt-github-commands.yml b/.github/workflows/oblt-github-commands.yml
@@ -8,19 +8,20 @@
 name: oblt-github-commands
 
 on:
-  pull_request:
+  pull_request_target:
     types:
       - labeled
 
 permissions:
   contents: read
-  issues: write
-  pull-requests: write
 
 jobs:
   comment:
     if: ${{ github.event.label.name == 'ci:project-deploy-observability' }}
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
     steps:
       - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
         with: