Grant gh_token with sufficient permissions (#3593)

microsoft · Mar 13, 2024 · 0c8298a · 0c8298a
1 parent 0c47754
commit 0c8298a
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -5,6 +5,7 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions: write-all
     outputs:
       version: ${{ steps.create-github-release.outputs.version }}
     steps:
@@ -55,6 +56,7 @@ jobs:
           echo "version=$VERSION" >> ${GITHUB_OUTPUT}
 
   create-docs-pull-request:
+    permissions: write-all
     needs:
       - release
     uses: ./.github/workflows/reusable-create-docs-pull-request.yml
@@ -64,6 +66,7 @@ jobs:
       AARON_MAXWELL_TOKEN: ${{ secrets.AARON_MAXWELL_TOKEN }}
 
   create-version-bump-pull-request:
+    permissions: write-all
     needs:
       - release
     uses: ./.github/workflows/reusable-create-version-bump-pull-request.yml