From 0a0f11663e5cdef7f12ca519202140fb0417e68c Mon Sep 17 00:00:00 2001 From: "Andrew W. Harn" Date: Mon, 9 Sep 2024 10:27:42 -0400 Subject: [PATCH] Update workflow permissions Signed-off-by: Andrew W. Harn --- .github/workflows/audit.yml | 4 ++-- .github/workflows/auto-comment.yml | 2 ++ .github/workflows/update-project.yml | 3 +++ .github/workflows/zowe-cli-plugin.yml | 4 ++++ 4 files changed, 11 insertions(+), 2 deletions(-) diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index 0c970d4..d26e01d 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -6,8 +6,8 @@ on: - master - zowe-v?-lts - next - # schedule: - # - cron: '0 10 * * *' + schedule: + - cron: '0 10 * * *' jobs: audit: diff --git a/.github/workflows/auto-comment.yml b/.github/workflows/auto-comment.yml index 31e2b3e..f4dff98 100644 --- a/.github/workflows/auto-comment.yml +++ b/.github/workflows/auto-comment.yml @@ -3,6 +3,8 @@ name: Auto Responder for New Issues on: issues: types: labeled +permissions: + issues: write jobs: processLabelAction: diff --git a/.github/workflows/update-project.yml b/.github/workflows/update-project.yml index 6694587..d429d59 100644 --- a/.github/workflows/update-project.yml +++ b/.github/workflows/update-project.yml @@ -12,6 +12,9 @@ env: PR_STATUS_DRAFT: 'In Progress' PR_STATUS_READY: 'Review/QA' +permissions: + pull-requests: write + jobs: update-project: name: Move project item diff --git a/.github/workflows/zowe-cli-plugin.yml b/.github/workflows/zowe-cli-plugin.yml index 5bd5dbc..8892604 100644 --- a/.github/workflows/zowe-cli-plugin.yml +++ b/.github/workflows/zowe-cli-plugin.yml @@ -78,6 +78,10 @@ jobs: if: github.event_name == 'push' && github.ref_protected needs: test runs-on: ubuntu-latest + permissions: + issues: write + contents: write + pull-requests: write steps: - name: Checkout