From bbaa539fbcbd280ebc54f14f0639a7d10058dde8 Mon Sep 17 00:00:00 2001 From: George Sapkin Date: Thu, 4 Dec 2025 04:31:51 +0200 Subject: [PATCH] ci: set explicit workflow permissions Add explicit permissions for modifying pull requests to labeler and multi-arch-test-build. Signed-off-by: George Sapkin --- .github/workflows/labeler.yml | 1 + .github/workflows/multi-arch-test-build.yml | 4 ++++ 2 files changed, 5 insertions(+) diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 29396df9be..dc6a480fd3 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -4,6 +4,7 @@ on: permissions: contents: read + pull-requests: write jobs: labeler: diff --git a/.github/workflows/multi-arch-test-build.yml b/.github/workflows/multi-arch-test-build.yml index 02bdd0b720..5097a31f7b 100644 --- a/.github/workflows/multi-arch-test-build.yml +++ b/.github/workflows/multi-arch-test-build.yml @@ -3,6 +3,10 @@ name: Test and Build on: pull_request: +permissions: + contents: read + pull-requests: write + jobs: formalities: name: Test Formalities -- 2.30.2