ci: set explicit workflow permissions

Add explicit permissions for modifying pull requests to labeler and
multi-arch-test-build.

Signed-off-by: George Sapkin <[email protected]>

diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 29396df9be16c237a0242ff769451c92ca6208fd..dc6a480fd3e1452a9e299abad2534ae34daa971a 100644 (file)
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -4,6 +4,7 @@ on:
 
 permissions:
   contents: read
+  pull-requests: write
 
 jobs:
   labeler:

diff --git a/.github/workflows/multi-arch-test-build.yml b/.github/workflows/multi-arch-test-build.yml
index 02bdd0b720f3bd8e40e750b3c318d256f571b644..5097a31f7b907490018319359fcea1453fd8f79c 100644 (file)
--- a/.github/workflows/multi-arch-test-build.yml
+++ b/.github/workflows/multi-arch-test-build.yml
@@ -3,6 +3,10 @@ name: Test and Build
 on:
   pull_request:
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   formalities:
     name: Test Formalities