From 24ee9add5168db6e5d5cbd80b1c6d100e90ca45d Mon Sep 17 00:00:00 2001
From: Matthew Garrett <magarret@microsoft.com>
Date: Wed, 21 Feb 2024 17:44:00 -0800
Subject: [PATCH] Added workflow permission to read pull requests

---
 .github/workflows/azure-ipam-build.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/azure-ipam-build.yml b/.github/workflows/azure-ipam-build.yml
index 12aca1f..0fe635a 100644
--- a/.github/workflows/azure-ipam-build.yml
+++ b/.github/workflows/azure-ipam-build.yml
@@ -9,6 +9,7 @@ on:
 permissions:
   id-token: write
   contents: write
+  pull-requests: read
 
 env:
   ACR_NAME: ${{ vars.IPAM_PROD_ACR }}