fix(workflows): assign explicit permissions (#156)

mdn · Feb 7, 2025 · 8839ef4 · 8839ef4
1 parent ec56167
commit 8839ef4
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/.github/workflows/auto-merge-workflows.yml b/.github/workflows/auto-merge-workflows.yml
@@ -1,6 +1,10 @@
 name: "auto-merge"
 on: [pull_request_target]
 
+permissions:
+  # Approve and comment pull request.
+  pull-requests: write
+
 jobs:
   auto-merge:
     uses: mdn/workflows/.github/workflows/auto-merge.yml@main

diff --git a/.github/workflows/welcome-bot.yml b/.github/workflows/welcome-bot.yml
@@ -11,6 +11,12 @@ on:
       - opened
       - closed
 
+permissions:
+  # Post comment in issue.
+  issues: write
+  # Post comment in pull request.
+  pull-requests: write
+
 jobs:
   allo-allo:
     uses: mdn/workflows/.github/workflows/allo-allo.yml@main