chore(IDX): set permissions by job

dfinity · Feb 17, 2025 · c7caf29 · c7caf29
1 parent 5b947cb
commit c7caf29
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.github/workflows-source/ci-pr-only.yml b/.github/workflows-source/ci-pr-only.yml
@@ -101,6 +101,8 @@ jobs:
         id: lock-generate
         if: steps.filter.outputs.lock-generate == 'true'
         run: ./ci/scripts/lock-generate.sh
+        permissions:
+          pull-request: write
 
   dependencies-check:
     name: Dependency Scan for PR

diff --git a/.github/workflows/ci-generate-ci.yml b/.github/workflows/ci-generate-ci.yml
@@ -42,6 +42,8 @@ jobs:
           python-version: "3.12"
       - name: Run Generate CI
         id: generate-ci
+        permissions:
+          pull-request: write
         run: |
           python $CI_PROJECT_DIR/.github/scripts/generate-ci.py