Add permissions on jobs creating PR

DataDog · Aug 28, 2024 · a15a4e7 · a15a4e7
1 parent 562ffc1
commit a15a4e7
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/create_rc_pr.yml b/.github/workflows/create_rc_pr.yml
@@ -47,6 +47,9 @@ jobs:
  create_rc_pr:
  runs-on: ubuntu-latest
  needs: find_release_branches
+ permissions:
+ contents: write # push commit and branch
+ pull-requests: write
  strategy:
  matrix:
  value: ${{fromJSON(needs.find_release_branches.outputs.branches)}}

diff --git a/.github/workflows/cws-btfhub-sync.yml b/.github/workflows/cws-btfhub-sync.yml
@@ -93,6 +93,9 @@ jobs:
  combine:
  needs: generate
  runs-on: ubuntu-latest
+ permissions:
+ contents: write # push commit and branch
+ pull-requests: write
  steps:
  - name: Checkout datadog-agent repository
  uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4