Merge pull request #5106 from nrb/github-actions-fix

Add permissions to the GitHub Actions token
kubernetes-sigs · Aug 26, 2024 · 4507c0b · 4507c0b
2 parents dff4d6c + e1e078b
commit 4507c0b
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml
@@ -13,6 +13,10 @@ on:
           description: 'Run code generation manually from GH CLI'
           required: true
           default: 'Make Generate'
+
+permissions:
+  contents: write # Allow actions to update dependabot PRs
+
 jobs:
   build:
     name: Build

diff --git a/.github/workflows/pr-verify.yml b/.github/workflows/pr-verify.yml
@@ -4,6 +4,9 @@ on:
   pull_request_target:
     types: [opened, edited, synchronize, reopened]
 
+permissions:
+  checks: write
+
 jobs:
   verify:
     runs-on: ubuntu-latest