From fbc03670163e8f3e2be69ef61cefc3234a0cb2da Mon Sep 17 00:00:00 2001
From: Pulumi Bot <30351955+pulumi-bot@users.noreply.github.com>
Date: Mon, 28 Oct 2024 23:02:15 -0700
Subject: [PATCH] Update GitHub Actions workflows. (#464)

This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 1dae09cd8997ed6a46385884e19716684d737c36.
---
 .github/workflows/prerequisites.yml        | 2 +-
 .github/workflows/run-acceptance-tests.yml | 4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/prerequisites.yml b/.github/workflows/prerequisites.yml
index 59fa3f4c..508d06d0 100644
--- a/.github/workflows/prerequisites.yml
+++ b/.github/workflows/prerequisites.yml
@@ -79,7 +79,7 @@ jobs:
         EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64)
         {
           echo "SCHEMA_CHANGES<<$EOF";
-          schema-tools compare -p splunk -o ${{ inputs.default_branch }} -n --local-path=provider/cmd/pulumi-resource-splunk/schema.json;
+          schema-tools compare -r github://api.github.com/pulumi -p splunk -o ${{ inputs.default_branch }} -n --local-path=provider/cmd/pulumi-resource-splunk/schema.json;
           echo "$EOF";
         } >> "$GITHUB_ENV"
     - if: inputs.is_pr && inputs.is_automated == false
diff --git a/.github/workflows/run-acceptance-tests.yml b/.github/workflows/run-acceptance-tests.yml
index db19b996..6d3ef1e6 100644
--- a/.github/workflows/run-acceptance-tests.yml
+++ b/.github/workflows/run-acceptance-tests.yml
@@ -41,6 +41,8 @@ jobs:
   prerequisites:
     if: github.event_name == 'repository_dispatch' ||
       github.event.pull_request.head.repo.full_name == github.repository
+    permissions:
+      pull-requests: write
     uses: ./.github/workflows/prerequisites.yml
     secrets: inherit
     with:
@@ -92,6 +94,8 @@ jobs:
     name: sentinel
     if: github.event_name == 'repository_dispatch' ||
       github.event.pull_request.head.repo.full_name == github.repository
+    permissions:
+      statuses: write
     needs:
     - test
     - build_provider