From b6a7685b90bd5cd2fecb953af30c2224f856605b Mon Sep 17 00:00:00 2001 From: "Andrew W. Harn" Date: Mon, 9 Sep 2024 10:48:04 -0400 Subject: [PATCH] Update workflow permissions (main) Signed-off-by: Andrew W. Harn --- .github/workflows/auto-comment.yml | 2 ++ .github/workflows/sdk-release.yaml | 4 ++++ .github/workflows/update-project.yml | 3 +++ 3 files changed, 9 insertions(+) diff --git a/.github/workflows/auto-comment.yml b/.github/workflows/auto-comment.yml index 31e2b3e9..f4dff98d 100644 --- a/.github/workflows/auto-comment.yml +++ b/.github/workflows/auto-comment.yml @@ -3,6 +3,8 @@ name: Auto Responder for New Issues on: issues: types: labeled +permissions: + issues: write jobs: processLabelAction: diff --git a/.github/workflows/sdk-release.yaml b/.github/workflows/sdk-release.yaml index 32055718..71627d75 100644 --- a/.github/workflows/sdk-release.yaml +++ b/.github/workflows/sdk-release.yaml @@ -15,6 +15,10 @@ on: jobs: release: runs-on: ubuntu-latest + permissions: + contents: write + issues: write + pull-requests: write steps: - name: Checkout diff --git a/.github/workflows/update-project.yml b/.github/workflows/update-project.yml index 32b59911..74bd25c3 100644 --- a/.github/workflows/update-project.yml +++ b/.github/workflows/update-project.yml @@ -12,6 +12,9 @@ env: PR_STATUS_DRAFT: "In Progress" PR_STATUS_READY: "Review/QA" +permissions: + pull-requests: write + jobs: update-project: name: Move project item